← Back to Dashboard

CVE-2025-15672

HIGH NVD
CVSS Score
8.1
Severity
HIGH
Source
NVD
Published
Aug 03, 2026
Description

The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other installed code.

View Full Details ← Back