CVE-2025-31069

CVE-2025-31069 : Deserialization of Untrusted Data in the WordPress theme HotStar – Multi-Purpose Business Theme (versions ≤1.4) enables unauthenticated PHP Object Injection. Affected: HotStar theme; root cause: deserializing untrusted data; impact: high confidentiality, integrity, and availabili...

CVE-2025-31069 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...

CVE-2025-31069 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4...

CVE-2025-31423 WordPress Umberto <= 1.2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8...

CVE-2025-31423

CVE-2025-31423 (Umberto

CVE-2025-31430 WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31430 WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1...

CVE-2025-31423 WordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto umberto allows Object Injection.This issue affects Umberto: from n/a through = 1.2.8...

CVE-2025-31430

CVE-2025-31430 — WordPress theme The Business (themeton)

CVE-2025-31631 WordPress Fish House <= 1.2.7 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7...

CVE-2025-31631 WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House fish-house allows Object Injection.This issue affects Fish House: from n/a through = 1.2.7...

CVE-2025-31631

CVE-2025-31631 affects AncoraThemes Fish House WordPress Theme (versions up to 1.2.7). Deserialization of untrusted data leads to PHP Object Injection with a CVSS v3.1 base score of 9.8 (CRITICAL). Patch status is Unpatched per Wordfence and Patchstack records; no fixed version is listed as avail...

CVE-2025-31924

CVE-2025-31924 affects the Craft & Arts WordPress theme (versions n/a through 2.5). The vulnerability is a Deserialization of Untrusted Data leading to PHP Object Injection via the Crafts & Arts deserialization path. Impact is described as high for confidentiality, integrity, and availability (CV...

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-31924 WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through = 2.5...

CVE-2025-32284

CVE-2025-32284 affects designthemes Pet World

CVE-2025-31927

CVE-2025-31927 affects Acerola - Ultra Minimalist Agency Theme (

CVE-2025-31927 WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5...

CVE-2025-32284 WordPress Pet World <= 2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Pet World allows Object Injection. This issue affects Pet World: from n/a through 2.8...

CVE-2025-32284 WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue affects Pet World: from n/a through = 2.8...