CVE-2025-31382 WordPress Language Field plugin <= 0.9 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in theode Language Field allows Stored XSS. This issue affects Language Field: from n/a through 0.9...

CVE-2025-31388

CVE-2025-31388: CSRF to Stored XSS in The World WordPress plugin is documented with affected version range (n/a–0.4) and a CVSS v3.1 base score of 7.1. Connected sources do not provide a product fix or exploit details; no remediation is specified in the provided documents.

CVE-2025-31390 WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a through = 0.9.6.1...

CVE-2025-31388 WordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through = 0.4...

CVE-2025-31391

CVE-2025-31391 corresponds to a CSRF-triggered Stored XSS in the WordPress plugin “Script Compressor.” Public docs indicate the affected product is Script Compressor (versions up to 1.7.1 as per initial description) and that the underlying issue combines Cross-Site Request Forgery with stored XSS...

CVE-2025-31392

CVE-2025-31392 – There is a CSRF to Stored XSS vulnerability in the WordPress plugin Smart Product Gallery Slider (versions ≤ 1.0.4). The vulnerability path is Cross-Site Request Forgery that can lead to stored cross-site scripting, as detailed in Wordfence-compiled vulnerability listings. The CV...

CVE-2025-31394

CVE-2025-31394 – More Mime Type Filters (WordPress) carries a Cross-Site Scripting vulnerability due to improper input neutralization during web page generation, enabling stored XSS. Details from initial doc: affected plugin/version range is from n/a through 0.3; the public documents do not speci...

CVE-2025-31394 WordPress More Mime Type Filters plugin <= 0.3 - CSRF to Stored XSS vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kailey trepmal More Mime Type Filters allows Stored XSS. This issue affects More Mime Type Filters: from n/a through 0.3...

CVE-2025-31399

Technical details about CVE-2025-31399 (CG Scroll To Top) are not provided in the connected documents. Public details appear reserved/no details in the supplied sources. Monitor for updates and potential public disclosures as more information becomes available.

CVE-2025-31395 WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a.ankit Easy Custom CSS easy-custom-css allows Stored XSS.This issue affects Easy Custom CSS: from n/a through = 1.0...

CVE-2025-31395 WordPress Easy Custom CSS plugin <= 1.0 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in a.ankit Easy Custom CSS easy-custom-css allows Stored XSS.This issue affects Easy Custom CSS: from n/a through = 1.0...

CVE-2025-31400

CVE-2025-31400 describes a CSRF leading to Stored XSS in the WS Audio Player (ICYLEAF WS Audio Player). Affected versions: WS Audio Player up to 1.1.8. The CVE entry, referenced by Patchstack and Wordfence, lists a CVSSv3.1 base score of 7.1 (HIGH) with network attack vector, low attack complexit...

CVE-2025-31400 WordPress WS Audio Player plugin <= 1.1.8 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in icyleaf WS Audio Player allows Stored XSS. This issue affects WS Audio Player: from n/a through 1.1.8...

CVE-2025-31402 WordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller newsboard allows Stored XSS.This issue affects NewsBoard Post and RSS Scroller: from n/a through = 1.2.12...

CVE-2025-31402

CVE-2025-31402 affects the NewsBoard Post and RSS Scroller WordPress plugin (affected versions: from n/a through 1.2.12). The issue is a Cross-Site Request Forgery that enables Stored Cross-Site Scripting. CVSSv3.1 base score is 7.1 (HIGH), with network attack vector, no privileges required, user...

CVE-2025-31401

CVE-2025-31401: MMX – Make Me Christmas plugin contains a CSRF to Stored XSS vulnerability affecting versions up to 1.0.0. The CVE’s base metrics show CVSS 3.1 with a base score of 7.1 (HIGH); attacker vector is NETWORK, with LOW confidentiality/integrity/availability impacts and user interaction...

CVE-2025-31402 WordPress NewsBoard Post and RSS Scroller plugin <= 1.2.12 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in NewsBoard Plugin NewsBoard Post and RSS Scroller newsboard allows Stored XSS.This issue affects NewsBoard Post and RSS Scroller: from n/a through = 1.2.12...

CVE-2025-31404 WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wladyslaw Madejczyk AF Tell a Friend af-tell-a-friend allows Stored XSS.This issue affects AF Tell a Friend: from n/a through = 1.4...

CVE-2025-31404 WordPress AF Tell a Friend plugin <= 1.4 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wladyslaw Madejczyk AF Tell a Friend allows Stored XSS. This issue affects AF Tell a Friend: from n/a through 1.4...

CVE-2025-32476 WordPress Advanced Tag Lists plugin <= 1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blueinstyle Advanced Tag Lists advanced-tag-list allows Stored XSS.This issue affects Advanced Tag Lists: from n/a through = 1.2...