CVE-2025-49869

CVE-2025-49869 is a PHP Object Injection via deserialization in the WordPress plugin Eventin (Arraytics Eventin). Affected versions are 4.0.31 and earlier. The vulnerability enables deserialization of untrusted data leading to object injection. Public sources (PatchStack/Wordfence) indicate the i...