CVE-2025-39588

Deserialization of Untrusted Data vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Object Injection.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.4.0...

CVE-2025-39588

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325620105590 2025-04-17 18:24:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3d7tk524...

CVE-2025-39588

Deserialization of Untrusted Data vulnerability in bdthemes Ultimate Store Kit Elementor Addons ultimate-store-kit allows Object Injection.This issue affects Ultimate Store Kit Elementor Addons: from n/a through = 2.4.0...

CVE-2025-39588 WordPress Ultimate Store Kit Elementor Addons <= 2.4.0 - Deserialization of untrusted data Vulnerability

Deserialization of Untrusted Data vulnerability in bdthemes Ultimate Store Kit Elementor Addons allows Object Injection. This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.4.0...

CVE-2025-39588

CVE-2025-39588 describes a deserialization of untrusted data vulnerability in the WordPress plugin “Ultimate Store Kit – Elementor Addons” (bdthemes) affecting versions up to 2.4.0. The root cause is deserializing untrusted data, enabling PHP object injection. Public details classify the impact a...

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability

Deserialization of untrusted data Vulnerability discovered by domiee13 in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.4.0...