CVE-2025-67596 is a CSRF vulnerability affecting the Strategy11 Team Business Directory plugin for WordPress, specifically versions up to 6.4.19. The vulnerability allows an attacker to induce an authenticated user to perform unintended actions via crafted requests. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No patch or mitigation details have been provided by the vendor or authoritative sources as of the publication date.

The vulnerability could allow an attacker to cause limited integrity impact by tricking authenticated users into executing unintended actions within the Business Directory plugin. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the affected plugin to trusted users only and avoid actions that require authentication from untrusted sources. Monitor official vendor channels for updates.