CVE-2025-39563 is a CSRF vulnerability affecting WP Trio's Conditional Payments for WooCommerce plugin, versions up to 3.3.0. The vulnerability allows an attacker to trick authenticated users into submitting unwanted requests to the plugin, potentially causing denial of service or disruption of availability. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction, and it impacts availability without affecting confidentiality or integrity.

The vulnerability impacts availability of the affected WooCommerce plugin by enabling attackers to cause denial of service or disruption through CSRF attacks. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the WP Trio vendor channels for updates. In the meantime, consider disabling or restricting access to the plugin if feasible to reduce risk.