CVE-2025-31906

Summary

CVE-2025-31906 is a Cross-Site Request Forgery (CSRF) vulnerability affecting WP Profitshare, a plugin used on ProfitShare.ro. The issue allows an attacker to execute malicious actions on a user's account by intercepting and manipulating their valid requests. Additionally, the plugin contains a Stored XSS (Cross-Site Scripting) vulnerability, which lets an attacker inject malicious scripts into web pages viewed by other users. The vulnerability affects WP Profitshare versions from n/a through 1.4.9. Users are advised to update to the latest version as soon as possible to mitigate these risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.