The vulnerability CVE-2025-47614 is a Cross-Site Request Forgery (CSRF) issue in the LessButtons Social Sharing and Statistics plugin by Chris Clark, affecting versions up to 1.6.1. CSRF vulnerabilities allow attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The CVSS 3.1 score of 4.3 reflects a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction required. The impact is limited to integrity with no confidentiality or availability impact. No patch or official remediation guidance is currently available.

This vulnerability could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially altering data or settings related to the LessButtons plugin. There is no impact on confidentiality or availability. The overall impact is limited to integrity with medium severity. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying anti-CSRF tokens or restricting access to trusted users. Monitor vendor channels for updates and apply patches promptly once available.