CVE-2025-58802 is a CSRF vulnerability affecting the TrustMate.io – WooCommerce integration plugin by michalzagdan, specifically versions up to 1.16.0. The vulnerability enables attackers to perform unauthorized actions by exploiting the lack of proper request validation mechanisms. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity but not confidentiality or availability.

The vulnerability could allow an attacker to cause an authenticated user to perform unintended actions within the WooCommerce integration plugin, potentially altering data or settings. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing CSRF protections such as verifying request origins or using security plugins that add CSRF tokens. Monitor vendor channels for updates.