CVE-2025-39472 describes a CSRF vulnerability in the WooCommerce Social Login plugin by wpweb. The vulnerability affects all versions before 2.8.3 and allows attackers to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions. The CVSS 3.1 base score of 4.3 reflects a network attack vector with low complexity and requiring user interaction, causing limited integrity impact without confidentiality or availability impact. No patch or official remediation details are currently available.

The vulnerability could allow attackers to induce authenticated users to perform unintended actions within the WooCommerce Social Login plugin context, potentially altering data or settings. There is no impact on confidentiality or availability reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider disabling the plugin or restricting its use to trusted environments to reduce risk. Monitor vendor channels for updates and apply any official patches once available.