CVE-2025-30889
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 7, 2025
CWE ID 502
Summary
CVE-2025-30889 is a Deserialization of Untrusted Data vulnerability affecting the PickPlugins Testimonial Slider from versions n/a through 2.0.13. An attacker can exploit this issue to perform Object Injection, potentially gaining unauthorized access or control over the affected system. This vulnerability could lead to serious security consequences, including data theft or system compromise. Users are advised to update to the latest version of the plugin to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.