CVE-2025-39349

Critical CVSS: 9.8

Deserialization of Untrusted Data vulnerability in Potenzaglobalsolutions CiyaShop ciyashop allows Object Injection.This issue affects CiyaShop: from n/a through <= 4.18.0.

Vendor

Potenzaglobalsolutions

Product

Ciyashop

CWE

CWE-502

Yayın Tarihi

2025-05-19 20:15:22

Güncelleme

2026-04-01 17:22:53

Source Identifier

audit@patchstack.com

KEV Date Added

Kategoriler

CWE-502 Ciyashop CRITICAL Potenzaglobalsolutions 2025

Referanslar

https://patchstack.com/database/Wordpress/Theme/ciyashop/vulnerability/wordpress-ciyashop-theme-4-18-0-php-object-injection-vulnerability?_s_id=cve