The vulnerability CVE-2025-30862 is a CSRF issue in the sminozzi reCAPTCHA for all plugin, affecting all versions up to 2.22. It allows an attacker to perform unauthorized actions by exploiting the trust a web application has in the user's browser. The vulnerability is remotely exploitable without privileges and requires user interaction. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

An attacker could potentially cause a user to perform unintended actions on a web application using the vulnerable reCAPTCHA plugin. The impact is limited to low integrity as per the CVSS score, with no confidentiality or availability impact reported. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as anti-CSRF tokens or other standard mitigations in their web applications to reduce risk.