The vulnerability identified as CVE-2025-31807 affects the Product Notices for WooCommerce plugin by CloudRedux. It is a CSRF issue that can be exploited to perform unauthorized actions via forged requests when a user interacts with a malicious site. The affected versions include all versions up to 1.3.4. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, no privileges required, but requiring user interaction. No official patch or vendor advisory is currently provided, and no exploits are known in the wild.

The impact of this vulnerability is limited to the potential for an attacker to induce an authenticated user to perform unintended actions within the Product Notices for WooCommerce plugin. The CVSS vector indicates no confidentiality or availability impact, but a low integrity impact is possible. There is no evidence of active exploitation or broader system compromise from this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling or limiting use of the affected plugin or implementing CSRF protections such as verifying nonces or tokens in requests if possible. Monitor official CloudRedux communications for updates on patches or mitigations.