The vulnerability CVE-2025-30856 is a CSRF issue in the Custom Field For WP Job Manager plugin by theme funda, affecting versions up to 1.4. It allows attackers to induce authenticated users to perform actions without their consent via crafted requests. The CVSS vector indicates the attack can be performed remotely over the network without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact. No vendor advisory or patch links are provided, and no exploits are known in the wild.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions within the affected plugin. The impact is limited to integrity, with no direct confidentiality or availability consequences reported. The medium CVSS score reflects this limited impact and the requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, and limit exposure by restricting plugin usage to trusted users. Monitor official channels for updates from theme funda regarding patches or mitigations.