CVE-2025-31423: WordPress Umberto theme <= 1.2.8 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto allows Object Injection. This issue affects Umberto: from n/a through 1.2.8.
Other sources
Deserialization of Untrusted Data vulnerability in AncoraThemes Umberto umberto allows Object Injection.This issue affects Umberto: from n/a through <= 1.2.8.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31423?
CVE-2025-31423 is a high-severity vulnerability due to its potential for object injection attacks.
How do I fix CVE-2025-31423?
To fix CVE-2025-31423, update your AncoraThemes Umberto installation to version 1.2.9 or later.
What types of attacks can CVE-2025-31423 facilitate?
CVE-2025-31423 can facilitate object injection attacks, allowing an attacker to manipulate the application by injecting malicious objects.
Which versions of AncoraThemes Umberto are affected by CVE-2025-31423?
CVE-2025-31423 affects all versions of AncoraThemes Umberto from n/a up to and including 1.2.8.
Is WordPress Umberto affected by CVE-2025-31423?
Yes, WordPress Umberto is also affected by CVE-2025-31423 for versions up to and including 1.2.8.