This vulnerability in PublishPress Revisions (<= 3.7.22) allows an attacker to perform Cross-Site Request Forgery (CSRF) attacks. CSRF vulnerabilities enable attackers to trick authenticated users into submitting unwanted requests to the application, potentially causing unintended actions. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The impact includes limited integrity and availability consequences, with no confidentiality impact reported.

The vulnerability could allow attackers to cause limited integrity and availability impacts by forcing authenticated users to perform unintended actions within PublishPress Revisions. There is no indication of confidentiality loss. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying standard CSRF mitigations such as verifying request origins and using anti-CSRF tokens if possible. Monitor PublishPress advisories for updates.