CVE-2025-31390

Cross-Site Request Forgery CSRF vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a through = 0.9.6.1...

WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability

CSRF to Stored XSS vulnerability discovered by johska in WordPress Plugin Social Crowd versions = 0.9.6.1...

CVE-2025-31390 WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a through = 0.9.6.1...

CVE-2025-31390 WordPress Social Crowd plugin <= 0.9.6.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in bdoga Social Crowd social-crowd allows Stored XSS.This issue affects Social Crowd: from n/a through = 0.9.6.1...

CVE-2025-31390

CVE-2025-31390 is a CSRF-to-Stored XSS vulnerability in Social Crowd (WordPress plugin) affecting versions up to 0.9.6.1. The Wordfence vulnerability data (and referenced listing) confirm the issue and indicate the vulnerability remains Unpatched. Practical impact is stored XSS via CSRF, as descr...