CVE-2025-31888

CVE-2025-31888 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin WP Multistore Locator (versions up to 2.5.2). The issue allows CSRF, affecting the plugin on vulnerable installations, with a CVSS v3.1 base score of 4.3 (Medium) and impact limited to integrity (Lo...

CVE-2025-31888 WordPress WP Multi Store Locator Plugin <= 2.5.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WPExperts.io WP Multistore Locator wp-multi-store-locator allows Cross Site Request Forgery.This issue affects WP Multistore Locator: from n/a through = 2.5.2...

CVE-2025-31884

CVE-2025-31884 affects the Norse Rune Oracle Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) in the plugin, with affected versions from unknown (n/a) up to 1.4.3. Root cause: improper neutralization of input during web page generation. Impact (as stated): potential ...

CVE-2025-31871 WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Galaxy Weblinks WP Clone any post type wp-clone-any-post-type allows Phishing.This issue affects WP Clone any post type: from n/a through = 3.6...

CVE-2025-31871 WordPress WP Clone any post type Plugin <= 3.4 - Open Redirect vulnerability

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Galaxy Weblinks WP Clone any post type allows Phishing. This issue affects WP Clone any post type: from n/a through 3.4...

CVE-2025-31872

No technical details about CVE-2025-31872 are provided in the connected documents. Initial description mentions a Missing Authorization issue affecting WP Clone any post type (up to 3.4), but there are no confirmed product/version/root‑cause data or fixes in the supplied sources. Monitor for upda...

CVE-2025-31871

CVE-2025-31871 corresponds to an Open Redirect vulnerability in the WordPress plugin WP Clone any post type (

CVE-2025-31860

CVE-2025-31860 refers to a Stored XSS in the WP AdCenter WordPress plugin (Ad Manager & Adsense Ads). The vulnerability affects WP AdCenter versions up to 2.5.8 (as noted in the initial entry) and is characterized by improper neutralization of input during web page generation. The concurrent Word...

CVE-2025-31860 WordPress WP AdCenter plugin <= 2.5.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPeka WP AdCenter wpadcenter allows Stored XSS.This issue affects WP AdCenter: from n/a through = 2.5.8...

CVE-2025-31860 WordPress WP AdCenter plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPeka WP AdCenter allows Stored XSS. This issue affects WP AdCenter: from n/a through 2.5.9...

CVE-2025-31842 WordPress Viral Loops WP Integration Plugin <= 3.4.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in viralloops Viral Loops WP Integration viral-loops-wp-integration allows Retrieve Embedded Sensitive Data.This issue affects Viral Loops WP Integration: from n/a through = 3.4.0...

CVE-2025-31837 WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus WP Proposals allows Stored XSS. This issue affects WP Proposals: from n/a through 2.3...

CVE-2025-31837 WordPress WP Proposals plugin <= 2.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Codeus WP Proposals allows Stored XSS. This issue affects WP Proposals: from n/a through 2.3...

CVE-2025-31837

CVE-2025-31837 is a Stored XSS vulnerability in the WordPress plugin WP Proposals (WP Proposals). Affected: WP Proposals versions up to 2.3. The initial document does not specify a root cause, exploit vector, impact details beyond Stored XSS, or any available fix; no connected documents provide c...

CVE-2025-31824 WordPress WP Optin Wheel Plugin <= 1.4.7 - Server Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability in Wombat Plugins WP Optin Wheel allows Server Side Request Forgery. This issue affects WP Optin Wheel: from n/a through 1.4.7...

CVE-2025-31824

CVE-2025-31824 — WP Optin Wheel SSRF (WordPress plugin) Affected: WP Optin Wheel – Gamified Optin Email Marketing Tool for WordPress and WooCommerce (versions from n/a to 1.4.7). Description: Server-Side Request Forgery (SSRF) vulnerability reported in the WP Optin Wheel plugin. The CVSS vector p...

CVE-2025-31808 WordPress SCSS WP Editor Plugin <= 1.1.8 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IT Path Solutions SCSS WP Editor allows Cross Site Request Forgery. This issue affects SCSS WP Editor: from n/a through 1.1.8...

CVE-2025-31808

Technical details for CVE-2025-31808 are not publicly available in the provided documents. No affected product/version, impact, exploit info, or fix is disclosed here. Monitor for updates.

CVE-2025-31808 WordPress SCSS WP Editor plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in IT Path Solutions SCSS WP Editor scss-wp-editor allows Cross Site Request Forgery.This issue affects SCSS WP Editor: from n/a through = 1.2.1...

CVE-2025-31772 WordPress WP Modal Popup with Cookie Integration plugin <= 2.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Astoundify WP Modal Popup with Cookie Integration wp-modal-popup-with-cookie-integration allows Stored XSS.This issue affects WP Modal Popup with Cookie Integration: from n/a through = 2.4...