The vulnerability identified as CVE-2025-58806 affects the WordPress Error Monitoring plugin by Bugsnag (up to version 1.6.3). It is a Cross-Site Request Forgery (CSRF) issue that enables stored Cross-Site Scripting (XSS) attacks. This means an attacker could trick an authenticated user into submitting a request that results in malicious script being stored and executed in the context of the affected site. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity, no privileges required, but requires user interaction. The impact includes partial confidentiality, integrity, and availability loss. No vendor advisory or patch information is currently provided.

Successful exploitation of this vulnerability could allow an attacker to execute stored XSS attacks via CSRF, potentially leading to unauthorized actions performed in the context of an authenticated user. This could result in partial loss of confidentiality, integrity, and availability of the affected system. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider disabling or removing the affected plugin if feasible, or applying any recommended temporary mitigations from the vendor. Monitor official channels for updates.