CVE-2025-39375 is a CSRF vulnerability affecting the Easy Child Theme Creator plugin by Ashok G, specifically versions up to 1.3.1. This vulnerability enables attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and requires user interaction, but no privileges are needed. The impact is limited to integrity loss without confidentiality or availability impact.

The vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user, potentially modifying settings or content within the Easy Child Theme Creator plugin. There is no direct confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that add CSRF tokens. Monitor official Ashok G communications for updates on patches or official fixes.