This vulnerability, identified as CWE-352, affects pCloud WP Backup versions up to 2.0.2 and allows unauthenticated attackers to exploit Cross-Site Request Forgery (CSRF). The CVSS 3.1 base score is 7.1, reflecting a network attack vector with low attack complexity, no privileges required, and user interaction required. The impact includes high confidentiality loss and low integrity impact, with no availability impact. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized actions on behalf of a user, potentially leading to high confidentiality breaches. Integrity impact is low, and availability is not affected. Since the vulnerability is unauthenticated, it can be exploited without credentials, increasing risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing CSRF protections such as verifying origin headers or using web application firewalls to detect and block suspicious requests. Monitor vendor channels for updates.