CVE-2025-53264 identifies a CSRF vulnerability in the ONet Regenerate Thumbnails plugin by Konrád Koller affecting versions up to 1.5. The vulnerability enables attackers to induce authenticated users to submit unauthorized requests, potentially causing limited integrity impact without confidentiality or availability loss. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and unchanged scope.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions related to thumbnail regeneration, impacting data integrity. There is no confidentiality or availability impact reported. No active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible.