The vulnerability CVE-2025-30980 involves a CSRF issue in the Simple Keyword to Link plugin by Alessandro Piconi, affecting versions up to 1.5. The vulnerability allows attackers to perform unauthorized actions by leveraging the victim's authenticated session, requiring user interaction but no privileges. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

An attacker could exploit this CSRF vulnerability to cause a logged-in user to perform unintended actions within the Simple Keyword to Link plugin, potentially modifying plugin settings or behavior. The impact is limited to integrity with no confidentiality or availability effects. There are no known exploits in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor official sources for updates from the vendor.