The vulnerability identified as CVE-2025-54030 is a CSRF issue in the WesternDeal WooCommerce Google Sheet Connector plugin for WordPress. It affects all versions up to 1.3.20. The flaw allows attackers to induce authenticated users to perform actions without their consent by exploiting the lack of proper request validation. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity loss without confidentiality or availability impact.

An attacker could exploit this vulnerability to cause an authenticated user to perform unintended actions within the WooCommerce Google Sheet Connector plugin. This may lead to unauthorized changes or manipulations of data handled by the plugin. There is no direct impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting access to the plugin's administrative functions and ensure users are cautious about clicking on untrusted links. Monitor the vendor's communications for updates and apply patches promptly once available.