The vulnerability CVE-2025-30801 is a CSRF issue in the TWB Woocommerce Reviews plugin by Abu Bakar, affecting versions up to 1.7.7. It allows attackers to perform unauthorized actions by exploiting the trust of an authenticated user. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact. There is no vendor advisory or patch information available at this time.

The impact is limited to potential unauthorized modification of data (integrity) through CSRF attacks. There is no direct impact on confidentiality or availability. The vulnerability requires user interaction and can be exploited remotely without authentication privileges. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or disabling the plugin if not essential. Monitor vendor channels for updates.