What is the CVSS score of CVE-2025-62975?

CVE-2025-62975 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Raychat Plugin CVE-2025-62975

MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2025-10-27 audit@patchstack.com

WordPress CSRF Wordpress Plugin

4.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

vuln.today AI

4.3 MEDIUM

CSRF is network-delivered with no attacker privileges; mandatory user interaction limits reach; integrity-only low impact reflects unauthorized config changes, not data disclosure or service disruption.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 25, 2026 - 12:17 vuln.today

DescriptionCVE.org

Cross-Site Request Forgery (CSRF) vulnerability in raychat Raychat raychat allows Cross Site Request Forgery.This issue affects Raychat: from n/a through <= 2.2.1.

AnalysisAI

Cross-site request forgery in the Raychat WordPress plugin (versions through 2.2.1) enables an unauthenticated attacker to induce unauthorized state-changing actions on behalf of an authenticated user without their knowledge. The attack is constrained by a mandatory user-interaction requirement - a victim with an active authenticated session must visit a malicious page. EPSS at 0.02% (5th percentile) confirms negligible exploitation probability, and no public exploit or CISA KEV listing has been identified at time of analysis.

Technical ContextAI

Raychat is a live chat and customer messaging WordPress plugin published by the vendor raychat. CWE-352 (Cross-Site Request Forgery) arises when plugin endpoints that perform state-changing operations fail to validate the origin of the HTTP request - typically by omitting or improperly verifying nonce/anti-CSRF tokens. Because browsers automatically attach session cookies to cross-origin requests, an attacker-controlled page can silently trigger plugin actions in the context of an authenticated victim. The CVSS vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N indicates the attack is fully network-deliverable, low-complexity on the attacker side, and limited to low integrity impact with no confidentiality or availability consequence.

Affected ProductsAI

The Raychat WordPress plugin by vendor raychat is affected in all versions from an unspecified baseline through and including version 2.2.1. No CPE string was explicitly provided in the source intelligence; the affected product is identified as the WordPress plugin slug 'raychat'. Full vulnerability details are available via the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/raychat/vulnerability/wordpress-raychat-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability.

RemediationAI

Update the Raychat plugin to a version beyond 2.2.1 once the vendor releases a patched build; no exact fix version is independently confirmed from available data, so administrators should monitor the official WordPress plugin repository and the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/raychat/vulnerability/wordpress-raychat-plugin-2-2-1-cross-site-request-forgery-csrf-vulnerability for patch availability. As a compensating control until a patch is confirmed, administrators can disable the Raychat plugin on sites where live chat functionality is non-essential - this eliminates the attack surface entirely with no side effects beyond loss of chat functionality. Additionally, training site administrators to avoid clicking unsolicited links while authenticated to WordPress reduces the UI:R exploitation pathway at low operational cost.