The vulnerability CVE-2025-32621 is a CSRF issue in the WP Map Route Planner WordPress plugin by Vsourz Digital, affecting versions up to 1.0.0. It allows attackers to induce authenticated users to execute unintended actions via crafted requests. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and low impacts on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to perform unauthorized actions on behalf of an authenticated user within the WP Map Route Planner plugin context, potentially leading to limited confidentiality, integrity, and availability impacts as indicated by the CVSS score. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider disabling or limiting use of the affected plugin and avoid interacting with untrusted links or sites that could trigger CSRF attacks. Monitor official Vsourz Digital communications for updates.