The vulnerability CVE-2025-22634 is a CSRF issue in the Easy Booked WordPress plugin by MD Abu Jubayer Hossain, affecting versions up to 2.4.5. CSRF vulnerabilities enable attackers to induce authenticated users to perform actions without their consent. The CVSS vector indicates the attack can be performed remotely with low attack complexity and no privileges required, but user interaction is needed. The impact is limited to integrity and availability, with no confidentiality impact reported. No patch or vendor advisory details are currently available.

Successful exploitation could allow an attacker to cause limited integrity and availability impacts by tricking authenticated users into submitting unauthorized requests. There is no confidentiality impact reported. The medium CVSS score reflects moderate risk but no known active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or limiting the use of the affected plugin or applying any recommended temporary mitigations from the vendor if published.