CVE-2025-49073

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

CVE-2025-49073

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

CVE-2025-49073

creationtimestamp| type| source ---|---|--- 2025-06-06 13:03:16+00:00| published-proof-of-concept| Telegram/82ysuM2gaizt5jBDrVeEMfH0tTtbl7RFfghuWMDU30WJc 2026-01-08 22:13:17+00:00| published-proof-of-concept| Telegram/EmV5qM2rczBRL4srCtTYo4Qe4hr9TGrLsA4GyGEHonbwa6c...

CVE-2025-49073 WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

CVE-2025-49073

CVE-2025-49073 concerns the WordPress theme Sweet Dessert. It describes a Deserialization of Untrusted Data (PHP object injection) vulnerability affecting Sweet Dessert versions before 1.1.13. The issue’s root cause is deserialization of untrusted data, enabling object injection. Severity is repo...

CVE-2025-49073 WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through 1.1.13...

WordPress Sweet Dessert Theme < 1.1.13 is vulnerable to PHP Object Injection

Software Sweet Dessert Type Theme Vulnerable versions 1.1.13 Fixed in 1.1.13 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-49073 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 3fb9eef0dd59 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...