The DoFollow Case by Case plugin by apasionados, up to version 3.5.1, contains a Cross-Site Request Forgery (CSRF) vulnerability (CVE-2025-47624). This vulnerability enables attackers to trick authenticated users into submitting unwanted requests, potentially leading to unauthorized actions with the user's privileges. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is necessary. The impact is limited to integrity loss without confidentiality or availability impact. No patch or official fix information is provided in the available data.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions, potentially altering data or settings within the affected plugin. The impact is limited to integrity, with no direct confidentiality or availability effects reported. The medium severity score reflects the moderate risk due to required user interaction and lack of privilege requirements.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing standard CSRF mitigations such as verifying anti-CSRF tokens and limiting exposure of the vulnerable plugin. Monitor vendor communications for updates on patches or official mitigations.