CVE-2026-22382 is a CSRF vulnerability affecting Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme versions up to 1.3. The vulnerability permits unauthorized commands to be transmitted from a user that the web application trusts, potentially leading to limited integrity and availability impacts. The CVSS vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, with no confidentiality impact but limited integrity and availability impact.

Successful exploitation could allow an attacker to perform actions on behalf of an authenticated user without their consent, potentially leading to limited integrity and availability issues on the affected WordPress site. There is no confidentiality impact reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for updates from Mikado-Themes and apply any available patches promptly once released. In the meantime, consider implementing CSRF protections such as verifying tokens in requests if possible.