CVE-2025-31067

CVE-2025-31067 affects the themeton Seven Stars WordPress theme (versions ≤ 1.4.4). It is a stored cross-site scripting (XSS) vulnerability arising from improper input neutralization during web page generation. The CVSS v3.1 base score is 7.1 (HIGH) with Network attack vector, requiring user inte...

CVE-2025-31067 WordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeton Seven Stars allows Stored XSS. This issue affects Seven Stars: from n/a through 1.4.4...

WordPress Seven Stars theme <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Seven Stars versions = 1.4.4...

WordPress Seven Stars Theme <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Seven Stars Type Theme Vulnerable versions = 1.4.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2025-31068 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 040266db8741 Credits Tran Nguyen Bao Khanh VCI ...