The vulnerability CVE-2025-48264 is a CSRF issue in the artiosmedia Product Code for WooCommerce plugin, affecting versions up to 1.5.0. It allows an attacker to induce an authenticated user to submit unauthorized requests to the plugin, potentially causing unintended changes or actions. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact reported.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions within the Product Code for WooCommerce plugin, potentially leading to unauthorized modifications. There is no reported impact on confidentiality or availability. The medium severity reflects the limited scope and requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or restrict access to trusted users only. Monitor vendor channels for updates regarding patches or official mitigations.