This vulnerability is an unauthenticated CSRF issue in the Abandoned Cart Lite for WooCommerce plugin by tychesoftwares, affecting versions up to 6.8.0. It allows attackers to trick users into submitting unwanted requests that could lead to limited integrity impact. The CVSS 3.1 score is 4.3 (medium), reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or official remediation level has been published as of the data provided.

The vulnerability allows an attacker to perform unauthorized actions by exploiting CSRF without authentication. The impact is limited to low integrity loss, with no confidentiality or availability impact. This could result in unintended changes or actions performed on behalf of a user without their consent.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying standard CSRF mitigations such as ensuring anti-CSRF tokens are used and avoiding unsafe cross-origin requests. Monitor vendor channels for updates.