CVE-2025-53586

CVE-2025-53586 describes a deserialization of untrusted data vulnerability in the WordPress WordPress theme Noi? NooTheme WeMusic (noo-wemusic) affecting versions from n/a through ≤ 1.9.1. The underlying issue is PHP object injection due to deserializing untrusted data in the WeMusic plugin/theme...

PT-2025-45231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in NooTheme WeMusic noo-wemusic allows Reflected XSS.This issue affects WeMusic: from n/a through = 1.9.1...

PT-2025-45232

Name of the Vulnerable Software and Affected Versions NooTheme WeMusic versions prior to 1.9.2 Description An issue exists where the software allows the deserialization of untrusted data, leading to PHP Object Injection. Authenticated attackers with subscriber-level access or higher can inject a...