CVE-2025-47568

Deserialization of Untrusted Data vulnerability in ZoomIt ZoomSounds allows Object Injection. This issue affects ZoomSounds: from n/a through 6.91...

CVE-2025-39485

Deserialization of Untrusted Data vulnerability in ThemeGoods Grand Tour grandtour allows Object Injection.This issue affects Grand Tour: from n/a through = 5.6...

CVE-2025-39480

Deserialization of Untrusted Data vulnerability in ThemeMakers Car Dealer cardealer allows Object Injection.This issue affects Car Dealer: from n/a through 1.6.8...

CVE-2025-32284

Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue affects Pet World: from n/a through = 2.8...

CVE-2025-31924

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-31927

Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5...

CVE-2025-31430

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31069

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...

CVE-2025-31049

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...

CVE-2025-31049 WordPress Dash <= 1.3 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton Dash allows Object Injection. This issue affects Dash: from n/a through 1.3...

CVE-2025-31069

CVE-2025-31069 : Deserialization of Untrusted Data in the WordPress theme HotStar – Multi-Purpose Business Theme (versions ≤1.4) enables unauthenticated PHP Object Injection. Affected: HotStar theme; root cause: deserializing untrusted data; impact: high confidentiality, integrity, and availabili...

CVE-2025-31423

CVE-2025-31423 (Umberto

CVE-2025-31430

CVE-2025-31430 — WordPress theme The Business (themeton)

CVE-2025-31631 WordPress Fish House <= 1.2.7 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7...

CVE-2025-31631

CVE-2025-31631 affects AncoraThemes Fish House WordPress Theme (versions up to 1.2.7). Deserialization of untrusted data leads to PHP Object Injection with a CVSS v3.1 base score of 9.8 (CRITICAL). Patch status is Unpatched per Wordfence and Patchstack records; no fixed version is listed as avail...

CVE-2025-31924

CVE-2025-31924 affects the Craft & Arts WordPress theme (versions n/a through 2.5). The vulnerability is a Deserialization of Untrusted Data leading to PHP Object Injection via the Crafts & Arts deserialization path. Impact is described as high for confidentiality, integrity, and availability (CV...

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-32284

CVE-2025-32284 affects designthemes Pet World

CVE-2025-32292

CVE-2025-32292 is a PHP Object Injection vulnerability in the Jarvis – Night Club, Concert, Festival WordPress Theme (AncoraThemes Jarvis) affecting versions

CVE-2025-32293

CVE-2025-32293 : Designthemes Finance Consultant (WordPress Theme)