The vulnerability CVE-2025-58939 in highwarden Super Store Finder (superstorefinder-wp) is a CSRF issue present in versions up to 7.5. It enables attackers to induce authenticated users to execute unwanted actions by exploiting the lack of proper request validation. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact.

An attacker could exploit this CSRF vulnerability to cause an authenticated user to perform unintended actions that may alter data integrity within the Super Store Finder plugin. There is no direct confidentiality or availability impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch or official fix is available, consider implementing CSRF protections such as verifying nonces or tokens in requests if possible, or restricting access to trusted users. Monitor vendor channels for updates.