CVE-2025-48111 is a Cross-Site Request Forgery (CWE-352) vulnerability affecting YITHEMES YITH PayPal Express Checkout for WooCommerce plugin versions up to 1.49.0. The vulnerability allows an attacker to trick an authenticated user into submitting unwanted requests, potentially leading to unauthorized actions within the affected plugin. The CVSS 3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, no privileges required, user interaction required, and limited impact on integrity without confidentiality or availability impact.

The vulnerability could allow an attacker to induce an authenticated user to perform unintended actions within the YITH PayPal Express Checkout plugin. The impact is limited to integrity with no confidentiality or availability effects. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any recommended temporary mitigations from the vendor or restrict access to the affected plugin functionality. Monitor official YITHEMES communications for updates.