CVE-2025-31584

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-31584
Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elfsight Testimonials Slider: from n/a through <= 1.0.1.
CVSS

No CVSS.

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve
Configurations

No configuration.

History

01 Apr 2026, 17:21

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.4 		v2 : unknown
v3 : unknown
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/elfsight-testimonials-slider/vulnerability/wordpress-elfsight-testimonials-slider-plugin-1-0-1-broken-access-control-vulnerability?_s_id=cve -
Summary
  • (es) La vulnerabilidad de falta de autorización en elfsight Elfsight Testimonials Slider permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al control deslizante de testimonios de Elfsight desde la versión n/d hasta la 1.0.1.
Summary (en) Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Elfsight Testimonials Slider: from n/a through 1.0.1. (en) Missing Authorization vulnerability in elfsight Elfsight Testimonials Slider elfsight-testimonials-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elfsight Testimonials Slider: from n/a through <= 1.0.1.

31 Mar 2025, 13:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-03-31 13:15

Updated : 2026-04-01 17:21

NVD link : CVE-2025-31584

Mitre link : CVE-2025-31584

CVE.ORG link : CVE-2025-31584

JSON object : View

Products Affected

No product.

CWE
CWE-862

Missing Authorization