The vulnerability CVE-2025-58804 is a Cross-Site Request Forgery issue in the brijrajs WooCommerce Single Page Checkout plugin, affecting versions up to 1.2.7. CSRF vulnerabilities enable attackers to induce users to perform actions they did not intend by exploiting the user's authenticated session. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts integrity but not confidentiality or availability. No patch or vendor advisory is currently available to confirm remediation status.

The impact is limited to potential unauthorized actions performed via CSRF, which could alter data or state within the WooCommerce Single Page Checkout plugin. There is no impact on confidentiality or availability reported. The medium severity reflects the limited scope and requirement for user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or limiting exposure by restricting plugin usage to trusted environments. Monitor vendor channels for updates.