Azienda Sicura

Lista CVE 2025/31xxx

CVE-2025-31010 (WordPress GTM Kit plugin <= 2.3.1 - Sensitive Data Exposure vulnerability)

CVE-2025-31016 (WordPress SimplyRETS Real Estate IDX plugin <= 3.0.3 - CSRF to Multiple Admin Actions vulnerability)

CVE-2025-31024 (WordPress JetWooBuilder plugin <= 2.1.18 - Local File Inclusion vulnerability)

CVE-2025-31031 (WordPress RJ Quickcharts plugin <= 0.6.1 - SQL Injection vulnerability)

CVE-2025-31043 (WordPress Job Colors for WP Job Manager plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31073 (WordPress JetSearch plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31074 (WordPress Unlimited <= 1.45 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31075 (WordPress MDJM Event Management plugin <= 1.7.5.2 - PHP Object Injection vulnerability)

CVE-2025-31076 (WordPress MicroPayments plugin <= 2.9.29 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31077 (WordPress WP Compress for MainWP plugin <= 6.30.03 - Server Side Request Forgery (SSRF) vulnerability)

CVE-2025-31079 (WordPress Ultimate Blocks plugin <= 3.2.7 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31083 (WordPress Usermaven plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability)

CVE-2025-31084 (WordPress Leaky Paywall <= 4.21.7 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31087 (WordPress Sunshine Photo Cart <= 3.4.10 - PHP Object Injection Vulnerability)

CVE-2025-31088 (WordPress Multiple Shipping And Billing Address For Woocommerce <= 1.5 - PHP Object Injection Vulnerability)

CVE-2025-31090 (WordPress Paid Member Subscriptions <= 2.14.3 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31092 (WordPress Dropdown Multisite selector < 0.9.4 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31093 (WordPress Click to Chat – WP Support All-in-One Floating Widget plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31094 (WordPress RPS Include Content <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability)