CVE-2025-27342 is a CSRF vulnerability affecting the josesan WooCommerce Recargo de Equivalencia plugin up to version 1.6.24. The vulnerability allows an attacker to trick authenticated users into submitting unauthorized requests, potentially leading to unintended changes within the plugin's functionality. The CVSS score of 4.3 reflects a network attack vector with low complexity and no privileges required but requiring user interaction. There is no indication of confidentiality or availability impact, only integrity is affected. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability could allow attackers to perform unauthorized actions by exploiting the trust of authenticated users through CSRF attacks. This may lead to integrity issues within the affected WooCommerce plugin's operations. There is no evidence of confidentiality or availability impact. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests, restricting user permissions, or disabling the plugin if feasible to reduce exposure.