CVE-2025-31808
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 352
Summary
CVE-2025-31808 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the IT Path Solutions SCSS WP Editor. This issue allows malicious actors to manipulate user actions, potentially leading to unintended changes or data access. The vulnerability exists in versions of the SCSS WP Editor ranging from n/a to 1.1.8. Successful exploitation could result in security implications for affected websites and their users. It is recommended that users update to the latest, secure version of the editor to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.