CVE-2025-32607

CVE-2025-32607 describes a Deserialization of Untrusted Data vulnerability (PHP object injection) in the WordPress plugin WpBookingly (Service Booking & Scheduling Solution). Affected versions:

PT-2025-16084 · WordPress · Wpbookingly

Name of the Vulnerable Software and Affected Versions: WpBookingly versions 1.2.0 and earlier Description: The issue is related to the deserialization of untrusted data, which allows object injection in WpBookingly. Recommendations: For versions 1.2.0 and earlier, update to a version that contain...