The vulnerability CVE-2025-30557 affects odihost Easy 301 Redirects plugin versions up to 1.33 and involves Cross-Site Request Forgery (CSRF). This type of vulnerability enables attackers to induce authenticated users to perform actions without their consent. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official fix details have been provided by the vendor or in the advisory data.

The impact of this vulnerability is limited to potential unauthorized modification of settings or data within the Easy 301 Redirects plugin due to CSRF. There is no reported impact on confidentiality or availability. Exploitation requires user interaction and does not require prior privileges, but the attack complexity is low. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that add CSRF tokens. Monitoring vendor communications for updates is recommended.