CVE-2025-32292: WordPress Jarvis – Night Club, Concert, Festival WordPress theme <= 1.8.11 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress allows Object Injection. This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through 1.8.11.
Other sources
Deserialization of Untrusted Data vulnerability in AncoraThemes Jarvis – Night Club, Concert, Festival WordPress jarvis allows Object Injection.This issue affects Jarvis – Night Club, Concert, Festival WordPress: from n/a through <= 1.8.11.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32292?
CVE-2025-32292 is classified as a high severity vulnerability due to its potential for object injection attacks.
How do I fix CVE-2025-32292?
To fix CVE-2025-32292, update the AncoraThemes Jarvis – Night Club, Concert, Festival WordPress theme to version 1.8.12 or later.
What types of vulnerabilities does CVE-2025-32292 exploit?
CVE-2025-32292 exploits the deserialization of untrusted data, allowing for object injection.
Which versions of AncoraThemes Jarvis are affected by CVE-2025-32292?
CVE-2025-32292 affects AncoraThemes Jarvis – Night Club, Concert, Festival WordPress versions up to and including 1.8.11.
What can attackers do with CVE-2025-32292?
With CVE-2025-32292, attackers can potentially execute arbitrary code by exploiting object injections.