This vulnerability (CVE-2026-22342) is an unauthenticated CSRF issue in the WordPress Dating Theme by PremiumPress Limited, affecting versions up to 11.2.0. It allows remote attackers to trick users into executing unwanted actions via crafted requests without proper verification of the request origin. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates that the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. Successful exploitation impacts confidentiality, integrity, and availability of the affected system.

Exploitation of this vulnerability can lead to unauthorized actions being performed on behalf of users, potentially compromising sensitive data (confidentiality), altering site data or configurations (integrity), and disrupting service availability. Given the unauthenticated nature, attackers do not need valid credentials to exploit this issue, increasing the risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution with untrusted links and consider implementing additional CSRF protections at the web application firewall or server level if possible.