CVE-2025-15672

The CVE concerns the ChamaWP WordPress plugin before 1.0.13. Affected component: PHP deserialization pathway where user input is not properly validated before being passed to a deserialization function. Root cause: unvalidated input enables unauthenticated attackers to inject arbitrary PHP object...