CVE-2025-6062 is a CSRF vulnerability in the Yougler Blogger Profile Page WordPress plugin by netlatch, affecting all versions up to and including v1.01. The issue arises from missing or incorrect nonce validation on the 'yougler-plugin.php' page, enabling attackers to forge requests that update plugin settings when an authenticated administrator is tricked into clicking a crafted link. The vulnerability has a CVSS 3.1 base score of 4.3 (medium severity) with network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory is currently available.

An attacker can cause an authenticated administrator to unknowingly modify plugin settings via a forged request, potentially leading to unauthorized configuration changes. There is no direct confidentiality or availability impact reported. The integrity impact is low, as the attacker cannot directly execute code or access sensitive data but can alter plugin settings.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should exercise caution by avoiding clicking untrusted links and consider restricting administrative access or implementing additional CSRF protections at the site level.