CVE-2025-31413
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-27

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Cross Site Request Forgery.This issue affects Element Pack Elementor Addons: from n/a through <= 8.3.13.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-22
Last Modified
2026-04-27
Generated
2026-06-16
AI Q&A
2026-01-22
EPSS Evaluated
2026-06-15
NVD
CVE-2025-31413
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
bdthemes element_pack_elementor_addons to 8.3.13 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-31413 is a Cross Site Request Forgery (CSRF) vulnerability in the WordPress Element Pack Elementor Addons Plugin versions up to 8.3.13. It allows an attacker to trick a higher privileged user into performing unwanted actions while authenticated by having them click a malicious link, visit a crafted page, or submit a form. The exploit requires user interaction and involves a privileged user, making it a low-severity issue. [1]

Impact Analysis

This vulnerability can impact you by allowing an attacker to perform unauthorized actions on your WordPress site if a privileged user is tricked into interacting with malicious content. However, the risk is low because it requires user interaction and the involvement of a privileged user. If exploited, it could lead to unwanted changes or actions executed with the privileges of the targeted user. [1]

Detection Guidance

There are no specific detection commands or network/system detection methods provided for this vulnerability. Detection would generally involve verifying the plugin version installed (Element Pack Elementor Addons Plugin version <= 8.3.13) to identify if the vulnerable version is present. [1]

Mitigation Strategies

The immediate step to mitigate this vulnerability is to update the Element Pack Elementor Addons Plugin to version 8.3.14 or later, where the issue has been fixed. Additionally, enabling auto-update options for the plugin can help maintain security against this and similar vulnerabilities. [1]

Compliance Impact

The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-31413. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart