🔐 CVE Alert

CVE-2025-31388

UNKNOWN 0.0

WordPress The World plugin <= 0.4 - CSRF to Stored XSS vulnerability

CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Cross-Site Request Forgery (CSRF) vulnerability in doa The World the-world allows Stored XSS.This issue affects The World: from n/a through <= 0.4.

CWE CWE-352
Vendor doa
Product the world
Published Apr 9, 2025
Last Updated Apr 1, 2026
Stay Ahead of the Next One

Get instant alerts for doa the world

Be the first to know when new unknown vulnerabilities affecting doa the world are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

doa / The World
0 ≤ 0.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗
patchstack.com: https://patchstack.com/database/Wordpress/Plugin/the-world/vulnerability/wordpress-the-world-plugin-0-4-csrf-to-stored-xss-vulnerability?_s_id=cve

Credits

johska | Patchstack Bug Bounty Program