The vulnerability CVE-2025-27359 is a CSRF issue in the Seerox WP Media File Type Manager WordPress plugin (versions <= 2.3.1). It allows an attacker to induce an authenticated user to execute unwanted actions by leveraging the lack of proper request validation against CSRF attacks. The CVSS 3.1 vector indicates the attack requires network access, low attack complexity, no privileges, and user interaction, resulting in limited integrity impact without confidentiality or availability impact.

Successful exploitation could lead to unauthorized modification of plugin settings or actions performed on behalf of an authenticated user, potentially altering the behavior of the media file type management within WordPress. There is no direct impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling the plugin or restricting access to trusted users only. Implementing additional CSRF protections at the WordPress or server level may help mitigate risk.