{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-15T11:28:34.903","vulnerabilities":[{"cve":{"id":"CVE-2025-31400","sourceIdentifier":"audit@patchstack.com","published":"2025-04-09T17:15:38.867","lastModified":"2026-04-01T17:21:01.890","vulnStatus":"Awaiting Analysis","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-Site Request Forgery (CSRF) vulnerability in icyleaf WS Audio Player ws-audio-player allows Stored XSS.This issue affects WS Audio Player: from n\/a through <= 1.1.8."},{"lang":"es","value":"La vulnerabilidad de Cross-Site Request Forgery (CSRF) en icyleaf WS Audio Player permite XSS almacenado. Este problema afecta al reproductor de audio WS desde la versión n\/d hasta la 1.1.8."}],"metrics":{},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-352"}]}],"references":[{"url":"https:\/\/patchstack.com\/database\/Wordpress\/Plugin\/ws-audio-player\/vulnerability\/wordpress-ws-audio-player-plugin-1-1-8-csrf-to-stored-xss-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}}]}