CVE-2025-31440: WordPress Terms of Use plugin <= 2.0 - Cross Site Request Forgery (CSRF) to Stored XSS vulnerability
Published Mar 28, 2025
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in Strategy11 Team Terms of Use terms-of-use-2 allows Stored XSS.This issue affects Terms of Use: from n/a through <= 2.0.
Affected Software
1 affected component
Strategy11 Terms of Use (terms-of-use-2)<=2.0
Event History
Mar 28, 2025
CVE Published
via MITRE·11:54 AM
Data Sourced
via MITRE·11:54 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-31440?
CVE-2025-31440 is considered a critical severity vulnerability due to its potential for Stored XSS exploitation.
2
How do I fix CVE-2025-31440?
To fix CVE-2025-31440, update the Strategy11 Team Terms of Use plugin to version 2.0 or later.
3
What type of vulnerability is CVE-2025-31440?
CVE-2025-31440 is a Cross-Site Request Forgery (CSRF) vulnerability that leads to Stored XSS.
4
Which versions are affected by CVE-2025-31440?
CVE-2025-31440 affects all versions of Strategy11 Team Terms of Use up to and including 2.0.
5
Who is the vendor for CVE-2025-31440?
The vendor for CVE-2025-31440 is Strategy11, the developer of the Team Terms of Use plugin.