CVE-2025-31431

Summary

CVE-2025-31431 is a Cross-Site Scripting (XSS) vulnerability affecting WP Bookmarks, a plugin used for managing and organizing bookmarks in WordPress sites. The issue, which allows Reflected XSS, stems from a failure to neutralize user input during web page generation. This vulnerability can be exploited by attackers to inject malicious scripts into a web page viewed by other users, potentially leading to unintended actions or data disclosure. The affected version range is from n/a through 1.1. To mitigate this risk, users are advised to update their WP Bookmarks plugin to the latest version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.