The vulnerability CVE-2025-57892 is a CSRF issue in the Simple Statistics for Feeds plugin by Jeff Starr, affecting versions up to and including 20250322. It allows an attacker to perform unauthorized actions by exploiting the trust a web application has in the user's browser, requiring user interaction but no privileges. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

The impact is limited to low integrity loss without confidentiality or availability impact. An attacker could potentially cause a user to perform unintended actions within the plugin, but no sensitive data disclosure or service disruption is indicated. No known exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing CSRF protections such as verifying tokens on state-changing requests or restricting access to trusted users. Monitor vendor channels for updates.