The bnielsen Affiliate Disclosure Statement plugin (version 0.3 and earlier) contains a CSRF vulnerability that could allow attackers to perform unauthorized actions by exploiting the trust of an authenticated user. The vulnerability is identified as CVE-2025-22552 and carries a CVSS 3.1 base score of 7.1, indicating a high severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability. No patch or official fix has been documented in the provided data.

Successful exploitation of this CSRF vulnerability could allow attackers to induce authenticated users to perform unintended actions within the Affiliate Disclosure Statement plugin, potentially affecting confidentiality, integrity, and availability of the affected system. However, no known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor vendor channels for updates regarding patches or official mitigations.