CVE-2025-39588
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 17, 2025
CWE ID 502
Summary
CVE-2025-39588 is a Deserialization of Untrusted Data vulnerability affecting the bdthemes Ultimate Store Kit Elementor Addons. This issue allows an attacker to perform Object Injection. The vulnerability exists in versions of the add-on from n/a through 2.4.0, putting affected users at risk. By exploiting this flaw, an attacker could potentially gain unauthorized access to a system or modify its functionality. It is crucial that users update their add-ons to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress