CVE-2025-31631: WordPress Fish House theme <= 1.2.7 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House allows Object Injection. This issue affects Fish House: from n/a through 1.2.7.
Other sources
Deserialization of Untrusted Data vulnerability in AncoraThemes Fish House fish-house allows Object Injection.This issue affects Fish House: from n/a through <= 1.2.7.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31631?
CVE-2025-31631 is classified as a high severity vulnerability due to its potential for object injection and deserialization of untrusted data.
How do I fix CVE-2025-31631?
To mitigate CVE-2025-31631, update the AncoraThemes Fish House plugin to at least version 1.2.8 or later.
What vulnerabilities are associated with CVE-2025-31631?
CVE-2025-31631 is associated with the deserialization of untrusted data that leads to object injection in the Fish House plugin.
Is my website affected by CVE-2025-31631?
If you are using AncoraThemes Fish House version 1.2.7 or earlier, your website is vulnerable to CVE-2025-31631.
What platforms does CVE-2025-31631 affect?
CVE-2025-31631 affects the Fish House plugin for both AncoraThemes and WordPress up to version 1.2.7.