CVE-2025-2797 is a CSRF vulnerability in the Woffice Core WordPress plugin affecting all versions up to 5.4.21. The issue arises from missing or incorrect nonce validation in the function responsible for handling user approval actions. An attacker can exploit this by crafting a malicious request that, if executed by an authenticated site administrator, results in unauthorized approval of user registrations. The vulnerability requires user interaction (UI:R) but no privileges (PR:N) and can be exploited remotely (AV:N).

Successful exploitation allows an attacker to approve user registrations without authorization by leveraging the site administrator's interaction with a malicious request. This could lead to unauthorized users gaining access to the system with approved accounts. The impact is limited to low confidentiality and integrity loss, with no availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should be cautious about clicking on untrusted links and consider implementing additional CSRF protections or restricting user approval actions to trusted environments.