The vulnerability CVE-2025-27315 is a CSRF issue in the wptom All-In-One Cufon plugin, affecting versions up to 1.3.0. It allows an attacker to induce an authenticated user to execute unintended commands via forged requests. The vulnerability does not impact confidentiality or availability but can lead to limited integrity loss. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and unchanged scope.

The impact is limited to integrity as the vulnerability allows unauthorized actions to be performed by tricking authenticated users. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

There is no vendor advisory or patch information currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, users should consider implementing CSRF protections such as verifying request origins or disabling the plugin if not needed.