CVE-2025-31588

Summary

CVE-2025-31588 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Elfsight Testimonials Slider, from version n/a through 1.0.1. An attacker can exploit this weakness by tricking a user into performing an unwanted action on a targeted website. The CSRF attacker can potentially change sensitive information, or execute unauthorized actions on behalf of the victim, posing a serious threat to user privacy and data security. Users are advised to update their Elfsight Testimonials Slider to the latest version as soon as possible to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.