The vulnerability CVE-2025-24742 is a CSRF issue in the WP Go Maps plugin for WordPress, affecting versions up to 9.0.40. It allows an attacker to trick authenticated users into submitting unauthorized requests, potentially causing limited impact such as modification of plugin settings or data. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. No confidentiality or availability impact is noted, only limited integrity impact.

The impact is limited to integrity, where an attacker could cause a user to perform unintended actions within the WP Go Maps plugin. There is no direct confidentiality or availability impact. The medium severity reflects the limited scope and requirement for user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling the plugin or limiting administrative access to trusted users to reduce risk. Monitor vendor channels for updates regarding a fix.