The vulnerability CVE-2025-30764 is a CSRF issue in the AntoineH Football Pool plugin affecting versions up to 2.12.2. It allows attackers to perform unauthorized actions by exploiting the trust of an authenticated user via crafted requests. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact. No patch or official remediation guidance is currently available from the vendor or other authoritative sources.

The vulnerability allows an attacker to induce an authenticated user to perform unintended actions on the Football Pool plugin, potentially altering data or settings. There is no impact on confidentiality or availability. The integrity impact is limited, and exploitation requires user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting actions to trusted users. Monitor official channels for updates from AntoineH regarding patches or mitigations.