CVE-2025-31413
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-04-27
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| bdthemes | element_pack_elementor_addons | to 8.3.13 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-31413 is a Cross Site Request Forgery (CSRF) vulnerability in the WordPress Element Pack Elementor Addons Plugin versions up to 8.3.13. It allows an attacker to trick a higher privileged user into performing unwanted actions while authenticated by having them click a malicious link, visit a crafted page, or submit a form. The exploit requires user interaction and involves a privileged user, making it a low-severity issue. [1]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an attacker to perform unauthorized actions on your WordPress site if a privileged user is tricked into interacting with malicious content. However, the risk is low because it requires user interaction and the involvement of a privileged user. If exploited, it could lead to unwanted changes or actions executed with the privileges of the targeted user. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific detection commands or network/system detection methods provided for this vulnerability. Detection would generally involve verifying the plugin version installed (Element Pack Elementor Addons Plugin version <= 8.3.13) to identify if the vulnerable version is present. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to update the Element Pack Elementor Addons Plugin to version 8.3.14 or later, where the issue has been fixed. Additionally, enabling auto-update options for the plugin can help maintain security against this and similar vulnerabilities. [1]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify any impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.