The Wibiya Toolbar up to version 2.0 contains a CSRF vulnerability (CVE-2025-26571) that enables attackers to induce authenticated users to perform unintended actions without their consent. The vulnerability has a CVSS 3.1 base score of 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability with scope change. No patch or vendor advisory details are currently available, and the product is not a cloud service.

Successful exploitation of this CSRF vulnerability could allow attackers to perform unauthorized actions on behalf of authenticated users, potentially leading to partial compromise of confidentiality, integrity, and availability of affected systems. The high CVSS score reflects the significant risk posed by this vulnerability if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted origins where possible. Monitor for vendor updates and apply patches promptly once released.