CVE-2025-24622 is a CSRF vulnerability affecting PickPlugins Job Board Manager versions up to 2.1.59. This vulnerability enables an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity and availability impacts. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and low availability impact. No patch or official remediation guidance is currently available.

Successful exploitation could allow an attacker to cause a logged-in user to perform unintended actions within the Job Board Manager plugin, potentially impacting the integrity and availability of the affected system. Confidentiality is not impacted. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, users should consider applying CSRF protections such as verifying anti-CSRF tokens or limiting user privileges where possible. Monitor official PickPlugins communications for updates.