CVE-2025-31924

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-31927

Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5...

CVE-2025-31430

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31069

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...

CVE-2025-31049

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...

CVE-2025-31049 WordPress Dash <= 1.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...

CVE-2025-31069

CVE-2025-31069 : Deserialization of Untrusted Data in the WordPress theme HotStar – Multi-Purpose Business Theme (versions ≤1.4) enables unauthenticated PHP Object Injection. Affected: HotStar theme; root cause: deserializing untrusted data; impact: high confidentiality, integrity, and availabili...

CVE-2025-31423

CVE-2025-31423 (Umberto

CVE-2025-31430

CVE-2025-31430 — WordPress theme The Business (themeton)

CVE-2025-31631 WordPress Fish House <= 1.2.7 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7...

CVE-2025-31631

CVE-2025-31631 affects AncoraThemes Fish House WordPress Theme (versions up to 1.2.7). Deserialization of untrusted data leads to PHP Object Injection with a CVSS v3.1 base score of 9.8 (CRITICAL). Patch status is Unpatched per Wordfence and Patchstack records; no fixed version is listed as avail...

CVE-2025-31924

CVE-2025-31924 affects the Craft & Arts WordPress theme (versions n/a through 2.5). The vulnerability is a Deserialization of Untrusted Data leading to PHP Object Injection via the Crafts & Arts deserialization path. Impact is described as high for confidentiality, integrity, and availability (CV...

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-32284

CVE-2025-32284 affects designthemes Pet World

CVE-2025-32292

CVE-2025-32292 is a PHP Object Injection vulnerability in the Jarvis – Night Club, Concert, Festival WordPress Theme (AncoraThemes Jarvis) affecting versions

CVE-2025-32293

CVE-2025-32293 : Designthemes Finance Consultant (WordPress Theme)

CVE-2025-39485 WordPress GrandTour Theme <= 5.5.1 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour | Travel Agency WordPress allows Object Injection. This issue affects Grand Tour | Travel Agency WordPress: from n/a through 5.5.1...

CVE-2025-39485

CVE-2025-39485 concerns the Grand Tour | Travel Agency WordPress theme deserializing untrusted data, enabling PHP object injection in versions up to 5.5.1. Public sources confirm a WordPress theme vulnerability with a critical CVSS 9.8, affecting the Grand Tour theme and labeled as unpatched in t...

CVE-2025-39480

CVE-2025-39480 describes a Deserialization of Untrusted Data vulnerability (PHP Object Injection) in ThemeMakers Car Dealer (WordPress theme) affected versions through 1.6.6. The issue enables object injection on unauthenticated access, with attacker‑controlled data potentially compromising confi...

CVE-2025-39495 WordPress Avantage Theme <= 2.4.6 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in BoldThemes Avantage allows Object Injection. This issue affects Avantage: from n/a through 2.4.6...