The vulnerability CVE-2025-27277 exists in the tiefpunkt Add Linked Images To Gallery plugin (version <= 1.4). It is a Cross-Site Request Forgery (CSRF) issue that could allow an attacker to induce an authenticated user to execute unwanted actions by submitting forged requests. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts confidentiality, integrity, and availability at a low to moderate level.

Successful exploitation of this CSRF vulnerability could lead to unauthorized actions being performed on behalf of an authenticated user, potentially resulting in partial loss of confidentiality, integrity, and availability of the affected system or data. However, no known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the vulnerable plugin to mitigate risk. Implementing standard CSRF protections or using security plugins that provide CSRF mitigation may reduce exposure.