This vulnerability is an unauthenticated CSRF affecting Plugins Garbage Collector (Database Cleanup) versions up to and including 0.14. It allows an attacker to trick a user into submitting a request that causes a high impact on integrity without requiring authentication. The CVSS 3.1 score is 6.5, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No known exploits are reported in the wild and no vendor remediation level is specified.

An attacker can exploit this vulnerability to perform unauthorized actions that compromise the integrity of the affected system without needing authentication. This could lead to unauthorized changes or deletions in the database cleanup process, impacting system reliability and data correctness.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting access to the affected functionality. Monitor official vendor channels for updates.