The vulnerability CVE-2025-32271 exists in the ablancodev Woocommerce Role Pricing plugin for WordPress, specifically in versions up to 3.5.6. It is a Cross-Site Request Forgery (CSRF) issue that could allow an attacker to induce an authenticated user to submit unauthorized requests that affect the plugin's role pricing functionality. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

Successful exploitation could lead to unauthorized modification of role pricing settings within the Woocommerce Role Pricing plugin by leveraging the victim's authenticated session. The impact is limited to integrity with no confidentiality or availability effects. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the plugin or limiting access to trusted users only. Implementing additional CSRF protections at the application or web server level may help mitigate risk.