The vulnerability CVE-2025-57893 affects the WP Fast Total Search plugin by Epsiloncool, specifically versions up to 1.79.270. It is a Cross-Site Request Forgery (CSRF) issue, which means an attacker could induce an authenticated user to execute unwanted actions without their consent. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges, requires user interaction, and impacts integrity but not confidentiality or availability.

The impact is limited to integrity as the vulnerability allows unauthorized actions to be performed via CSRF. There is no direct impact on confidentiality or availability. Since the attack requires user interaction and no privileges, it is a moderate risk but does not allow full compromise of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling or limiting the use of the affected plugin or applying any recommended temporary mitigations from the vendor. Monitor official Epsiloncool channels for updates.