This vulnerability is an unauthenticated CSRF affecting WP Migrate Lite versions up to 2.7.8. It allows an attacker to trick a user into submitting a request that the user did not intend, leading to potential disruption of service (availability impact). The CVSS 3.1 base score is 4.7, reflecting network attack vector, low complexity, no privileges required, user interaction required, scope changed, no confidentiality or integrity impact, and low availability impact. No patch or official remediation level has been disclosed as of the publication date.

The impact is limited to availability, meaning the vulnerability could be exploited to cause denial of service or disruption of normal plugin operations. There is no confidentiality or integrity impact reported. The vulnerability requires user interaction but no privileges or authentication, increasing its risk profile. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution with untrusted content and consider disabling or restricting the plugin if feasible. Monitor official WP Engine communications for updates on patches or mitigations.