CVE-2025-31382

Cross-Site Request Forgery CSRF vulnerability in theode Language Field language-field allows Stored XSS.This issue affects Language Field: from n/a through = 0.9...

CVE-2025-31026

Cross-Site Request Forgery CSRF vulnerability in Austin Comment Validation Reloaded comment-validation-reloaded allows Stored XSS.This issue affects Comment Validation Reloaded: from n/a through = 0.5...

CVE-2025-31385

CVE-2025-31385 describes a Cross-Site Request Forgery (CSRF) leading to a Stored XSS in the WordPress plugin Site Table of Contents . Affected versions are listed as from n/a through 0.3 ; CVSS 3.1 base score 7.1 (HIGH). The Connected Documents confirm the issue type (CSRF → Stored XSS) and affec...

CVE-2025-31005 WordPress Easyfonts plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Uzair Easyfonts easyfonts allows Cross Site Request Forgery.This issue affects Easyfonts: from n/a through = 1.1.2...

CVE-2025-31005 WordPress Easyfonts plugin <= 1.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Uzair Easyfonts easyfonts allows Cross Site Request Forgery.This issue affects Easyfonts: from n/a through = 1.1.2...

CVE-2025-31023 WordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

CVE-2025-31023 WordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

CVE-2025-31023

CVE-2025-31023 (Seo Meta Tags) Cross-Site Request Forgery leading to Privilege Escalation in the Seo Meta Tags plugin for WordPress (affected: v1.4 and earlier). CVSS 3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Wordfence vulnerability data lists this entry with patch status as Unpat...

CVE-2025-31026 WordPress Comment Validation Reloaded plugin <= 0.5 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Austin Comment Validation Reloaded comment-validation-reloaded allows Stored XSS.This issue affects Comment Validation Reloaded: from n/a through = 0.5...

CVE-2025-31032 WordPress Pagopar – WooCommerce Gateway plugin <= 2.7.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Pagopar - Grupo M S.A. Pagopar – WooCommerce Gateway pagopar-woocommerce-gateway allows Stored XSS.This issue affects Pagopar – WooCommerce Gateway: from n/a through = 2.7.1...

CVE-2025-31033 WordPress Buddypress Humanity plugin <= 1.2 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Adam Nowak Buddypress Humanity buddypress-humanity allows Cross Site Request Forgery.This issue affects Buddypress Humanity: from n/a through = 1.2...

CVE-2025-31036 WordPress WPSolr plugin <= 24.0 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPSOLR WPSolr wpsolr-free allows Privilege Escalation.This issue affects WPSolr: from n/a through = 24.0...

CVE-2025-31382 WordPress Language Field plugin <= 0.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in theode Language Field language-field allows Stored XSS.This issue affects Language Field: from n/a through = 0.9...

CVE-2025-31382 WordPress Language Field plugin <= 0.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in theode Language Field allows Stored XSS. This issue affects Language Field: from n/a through 0.9...

CVE-2025-31388 WordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-31390 WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a through = 0.9.6.1...

CVE-2025-31388

CVE-2025-31388: CSRF to Stored XSS in The World WordPress plugin is documented with affected version range (n/a–0.4) and a CVSS v3.1 base score of 7.1. Connected sources do not provide a product fix or exploit details; no remediation is specified in the provided documents.

CVE-2025-31392

CVE-2025-31392 – There is a CSRF to Stored XSS vulnerability in the WordPress plugin Smart Product Gallery Slider (versions ≤ 1.0.4). The vulnerability path is Cross-Site Request Forgery that can lead to stored cross-site scripting, as detailed in Wordfence-compiled vulnerability listings. The CV...

CVE-2025-31394

CVE-2025-31394 – More Mime Type Filters (WordPress) carries a Cross-Site Scripting vulnerability due to improper input neutralization during web page generation, enabling stored XSS. Details from initial doc: affected plugin/version range is from n/a through 0.3; the public documents do not speci...

CVE-2025-31395 WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a.ankit Easy Custom CSS easy-custom-css allows Stored XSS.This issue affects Easy Custom CSS: from n/a through = 1.0...