CVE-2025-31067 WordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Seven Stars allows Stored XSS. This issue affects Seven Stars: from n/a through 1.4.4...

CVE-2025-31067

CVE-2025-31067 affects the themeton Seven Stars WordPress theme (versions ≤ 1.4.4). It is a stored cross-site scripting (XSS) vulnerability arising from improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH) with Network attack vector, requiring user inte...

WordPress Seven Stars theme <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Seven Stars versions = 1.4.4...

WordPress Seven Stars Theme <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Seven Stars Type Theme Vulnerable versions = 1.4.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-31068 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 040266db8741 Credits Tran Nguyen Bao Khanh VCI ...