The vulnerability CVE-2025-50036 is a CSRF issue in the Yamna Khawaja Mailing Group Listserv plugin for WordPress (wp-mailing-group) affecting versions up to 3.0.5. It allows attackers to trick authenticated users into submitting unauthorized requests, potentially causing denial of service or disruption (availability impact). The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high availability impact. No patch or official fix information is provided in the data.

The vulnerability can be exploited remotely without privileges but requires user interaction. It does not compromise confidentiality or integrity but can cause availability issues, such as denial of service or disruption of mailing group functionality. No known exploits in the wild have been reported, so the practical impact currently appears limited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin to mitigate risk. Monitor vendor channels for updates and apply patches promptly once released.