CVE-2025-31845

Summary

CVE-2025-31845 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Rohit Choudhary Theme Duplicator. This issue allows attackers to submit malicious requests on behalf of a user who is currently logged into the vulnerable system. The Theme Duplicator, from version n/a through 1.1, is the affected software. Successful exploitation of this vulnerability could result in unintended actions being performed or sensitive information being accessed. To mitigate this risk, it is recommended that users update to the latest version of the Theme Duplicator as soon as possible, and implement additional security measures such as CSRF tokens to further protect against such attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.