CVE-2025-30985

CVE-2025-30985 involves Deserialization of Untrusted Data in the GNUCommerce WordPress plugin, enabling PHP Object Injection. Affected: GNUCommerce versions n/a through 1.5.4. CVSSv3.1 base score 9.8 (CRITICAL). Exploitation status not provided in the connected documents; no remediation details a...