The vulnerability CVE-2025-62148 concerns a CSRF issue in the Robots.txt rewrite plugin by Eugen Bobrowski, affecting all versions up to 1.6.1. The vulnerability enables attackers to perform unauthorized actions via forged requests that rely on user interaction. The CVSS vector indicates the attack requires user interaction but no privileges and has a network attack vector with low complexity. The impact is limited to integrity with no confidentiality or availability impact.

The impact is limited to integrity, meaning an attacker could cause unauthorized changes to the plugin's configuration or behavior through CSRF attacks. There is no impact on confidentiality or availability. The medium severity reflects the potential for limited unauthorized modifications but requires user interaction and no privileges.

Patch status is not yet confirmed — no patch or official remediation information is provided in the available data. Users should monitor the vendor's advisory channels for updates and consider implementing CSRF protections such as verifying request origins or using anti-CSRF tokens if possible.