CVE-2025-58800 identifies a CSRF vulnerability in the WP Email Template WordPress plugin developed by Steve Truman, affecting all versions up to 2.8.5. The vulnerability enables attackers to trick authenticated users into submitting unauthorized requests, potentially leading to limited integrity impact. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory details are currently available.

The vulnerability could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially modifying plugin settings or content integrity. There is no impact on confidentiality or availability reported. The overall severity is medium based on the CVSS score of 4.3. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider limiting exposure by restricting access to authenticated users or applying web application firewall rules to detect and block CSRF attempts. Monitor vendor channels for updates.