CVE-2025-68052 is an unauthenticated CSRF vulnerability in Eagle-Themes Eagle Booking affecting versions up to 1.3.4.3. The vulnerability enables attackers to trick users into executing unwanted actions within the application context, potentially leading to full compromise of confidentiality, integrity, and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation of this vulnerability could allow attackers to perform unauthorized actions on behalf of users without their consent, potentially leading to full compromise of the affected system's confidentiality, integrity, and availability. Given the unauthenticated nature, any user visiting a malicious page could be targeted. However, no known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider implementing CSRF protections such as verifying anti-CSRF tokens in requests and restricting state-changing operations to authenticated and verified users. Monitor vendor channels for updates.