The vulnerability CVE-2025-28859 is a CSRF issue in the CodeVibrant Maintenance Notice plugin affecting versions up to 1.0.6. It allows attackers to induce authenticated users to execute unintended commands by leveraging the lack of proper CSRF protections. The CVSS score of 4.3 reflects a network attack vector with low complexity and user interaction required, causing limited integrity impact without confidentiality or availability loss. No patch or vendor advisory details are currently available.

Successful exploitation could lead to limited integrity impact by forcing authenticated users to perform unintended actions within the Maintenance Notice plugin. There is no confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests, restricting user permissions, or disabling the plugin if not needed.