The vulnerability CVE-2025-58878 is a CSRF issue in the usamafarooq Woocommerce Gifts Product plugin for WooCommerce, affecting versions up to 1.0.0. It allows attackers to induce authenticated users to perform unintended actions without their consent. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction, with no confidentiality impact but high integrity impact and no availability impact. There is no vendor advisory or patch information provided, and no known exploits have been observed.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unauthorized actions within the Woocommerce Gifts Product plugin, potentially altering data or state in a way that compromises integrity. There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported, so the threat is theoretical at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, users should consider disabling the plugin or limiting its use to trusted environments. Implementing standard CSRF protections at the application level may help mitigate risk. Monitor for vendor updates regarding a fix.