CVE-2025-58792 describes a CSRF vulnerability in the WPKube Authors List plugin affecting versions up to 2.0.6.2. The vulnerability enables an attacker to induce an authenticated user to submit unauthorized requests, potentially altering data or settings without the user's consent. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact is limited to integrity with no confidentiality or availability impact.

The vulnerability may allow attackers to cause limited unauthorized changes by exploiting user interaction, affecting data integrity. There is no impact on confidentiality or availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that add CSRF tokens. Monitor vendor communications for updates.