This vulnerability is a CSRF issue in the 'Add Polylang support for Customizer' plugin for WordPress, which enables attackers to trick authenticated users into submitting unauthorized requests. The affected versions include all versions up to 1.4.5. The vulnerability does not require privileges (PR:N) but does require user interaction (UI:R). The impact is limited to low integrity impact with no confidentiality or availability impact. There is no vendor advisory or patch information provided at this time.

The vulnerability allows an attacker to cause a logged-in user to perform unintended actions within the plugin context, potentially modifying settings or behavior related to Polylang support in the WordPress Customizer. There is no direct confidentiality or availability impact reported. The overall impact is limited to integrity with medium severity based on the CVSS score of 4.3.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting the exposure of the affected plugin by restricting access to trusted users and avoiding interaction with untrusted sites while logged in. Monitor for vendor updates regarding patches or official mitigations.