Lista CVE 2025/31xxx

CVE nel gruppo: 31xxx

CVE-2025-31125 (N/A)

CVE-2025-31128 (Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query)

CVE-2025-31129 (gifplayer XSS vulnerability)

CVE-2025-31139 (jooby-pac4j: deserialization of untrusted data)

CVE-2025-31140 (N/A)

CVE-2025-31141 (N/A)

CVE-2025-31160 (N/A)

CVE-2025-31162 (N/A)

CVE-2025-31163 (fig2dev float point exception)

CVE-2025-31164 (fig2dev segmentation fault)

CVE-2025-31165 (fig2dev heap-buffer overflow)

CVE-2025-31176 (Cross Site Scripting in NightWolf Penetration Platform)

CVE-2025-31178 (Gnuplot: gnuplot segmentation fault on plot3d_points)

CVE-2025-31179 (Gnuplot: gnuplot segmentation fault on getannotatestring)

CVE-2025-31180 (Gnuplot: gnuplot segmentation fault on xstrftime)

CVE-2025-31181 (Gnuplot: gnuplot segmentation fault on canvas_text)

CVE-2025-31182 (Gnuplot: gnuplot segmentation fault on x11_graphics)

CVE-2025-31183 (N/A)

CVE-2025-31184 (N/A)

CVE-2025-31187 (N/A)

CVE-2025-31188 (N/A)

CVE-2025-31191 (N/A)

CVE-2025-31192 (N/A)

CVE-2025-31194 (N/A)

CVE-2025-31335 (N/A)

CVE-2025-31367 (N/A)

CVE-2025-31368 (N/A)

CVE-2025-31369 (N/A)

CVE-2025-31370 (N/A)

CVE-2025-31371 (N/A)

CVE-2025-31372 (N/A)

CVE-2025-31373 (N/A)

CVE-2025-31374 (N/A)

CVE-2025-31376 (N/A)

CVE-2025-31386 (WordPress NanoSupport plugin <= 0.6.0 - Broken Access Control vulnerability)

CVE-2025-31387 (WordPress Simple:Press plugin <= 6.10.11 - Broken Access Control vulnerability)

CVE-2025-31406 (WordPress InstaWP Connect plugin <= 0.1.0.82 - Local File Inclusion vulnerability)

CVE-2025-31408 (WordPress ELEX WooCommerce Request a Quote plugin <= 2.3.3 - Broken Access Control vulnerability)

CVE-2025-31409 (WordPress Zoho Flow plugin <= 2.13.3 - Broken Access Control vulnerability)

CVE-2025-31410 (WordPress Bridge Core plugin < 3.3.1 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31412 (WordPress WP Church Donation plugin <= 1.7 - Cross Site Request Forgery (CSRF) vulnerability)

CVE-2025-31414 (WordPress JetProductGallery plugin <= 2.1.22 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31415 (WordPress Cost Calculator Builder plugin <= 3.2.65 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31417 (WordPress YayExtra <= 1.5.2 - Broken Access Control Vulnerability)

CVE-2025-31419 (WordPress WP Docs plugin < 2.2.7 - Broken Access Control vulnerability)

CVE-2025-31432 (WordPress Churel plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability)

CVE-2025-31433 (WordPress Pop-Up Chop Chop <= 2.1.7 - Local File Inclusion Vulnerability)

CVE-2025-31434 (WordPress Magic Embeds <= 3.1.2 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31435 (WordPress FormLift for Infusionsoft Web Forms <= 7.5.19 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31437 (WordPress Microblog Poster plugin <= 2.1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability)

CVE-2025-31438 (WordPress WP-OGP <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability)

CVE-2025-31439 (WordPress WP Supersized <= 3.1.6 - Cross Site Request Forgery (CSRF) Vulnerability)

CVE-2025-31440 (WordPress Browser Caching with .htaccess 1.2.1 – Cross Site Request Forgery (CSRF) Vulnerability)

CVE-2025-31443 (WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability)

CVE-2025-31444 (WordPress KK I Like It plugin <= 1.7.5.3 - CSRF to Stored XSS vulnerability)

CVE-2025-31447 (WordPress ShowTime Slideshow plugin <= 1.6 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability)

CVE-2025-31448 (WordPress NertWorks All in One Social Share Tools <=1.26 - Cross Site Request Forgery (CSRF) Vulnerability)

CVE-2025-31449 (WordPress Simple Trackback Disabler <= 1.4 - Cross Site Request Forgery (CSRF) Vulnerability)

CVE-2025-31450 (WordPress The Visitor Counter plugin <= 1.4.3 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability)

CVE-2025-31451 (WordPress Toggle Box <= 1.6 - Cross Site Scripting (XSS) Vulnerability)