The vulnerability CVE-2025-27318 is a CSRF issue in the ixiter Simple Google Sitemap plugin, affecting versions up to 1.6. It allows an attacker to induce an authenticated user to submit unauthorized requests, potentially leading to limited impact on the integrity of the affected system. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. Confidentiality and availability impacts are not present, with only a low impact on integrity.

The impact is limited to a low integrity compromise due to the CSRF vulnerability. There is no confidentiality or availability impact reported. Exploitation requires user interaction and no privileges are needed, which reduces the overall risk. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible. Monitor vendor communications for updates on fixes.