CVE-2025-68580 is a CSRF vulnerability affecting pluginsware Advanced Classifieds & Directory Pro through version 3.2.9. The vulnerability enables attackers to induce authenticated users to perform unintended actions via crafted requests. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, limited integrity impact, and no availability impact. No vendor advisory or patch information is available to confirm remediation status.

Successful exploitation could allow an attacker to cause an authenticated user to perform limited unauthorized actions within the affected application, potentially impacting data integrity. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing CSRF protections such as verifying anti-CSRF tokens in requests or restricting sensitive actions to POST requests with proper validation.