CVE-2025-64206

CVE-2025-64206 describes a deserialization of untrusted data vulnerability in the WordPress/Jannah theme, enabling PHP Object Injection in Jannah versions up to and including 7.6.0. The issue is triggered via deserialized data handling in Jannah and is rated with a CVSS v3.1 base score of 9.8 (CR...