CVE-2025-31784

{"id": "CVE-2025-31784", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-04-01T15:16:16.253", "references": [{"url": "https://patchstack.com/database/wordpress/plugin/embed-extended/vulnerability/wordpress-embed-extended-embed-maps-videos-websites-source-codes-and-more-plugin-1-4-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-352"}]}], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery (CSRF) vulnerability in Rudy Susanto Embed Extended \u2013 Embed Maps, Videos, Websites, Source Codes, and more allows Cross Site Request Forgery. This issue affects Embed Extended \u2013 Embed Maps, Videos, Websites, Source Codes, and more: from n/a through 1.4.0."}], "lastModified": "2025-04-01T20:26:11.547", "sourceIdentifier": "audit@patchstack.com"}