CVE-2025-0808 is a CSRF vulnerability in the Houzez Property Feed WordPress plugin affecting all versions up to 2.4.21. The issue is due to missing or incorrect nonce validation on the "deleteexport" action, allowing unauthenticated attackers to cause deletion of property feed exports if an administrator is tricked into executing a malicious request. The vulnerability does not impact confidentiality or availability but can cause limited integrity loss by deleting data. No known exploits are reported in the wild, and no patch or official fix information is available at this time.

Exploitation of this vulnerability allows an attacker to delete property feed exports without authentication by leveraging a CSRF attack against an administrator. This results in limited integrity impact (deletion of data) but does not affect confidentiality or availability. There are no known active exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should avoid clicking on suspicious links and consider implementing additional CSRF protections or restricting access to the affected action where possible.