CVE-2025-32568: WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It requires no authentication or user interaction.

Q: What could successful exploitation affect?

The CVSS assessment rates confidentiality, integrity, and availability impact as high. The overall CVSS v3.1 score is 9.8 (Critical).

Published Apr 11, 2025

Updated

Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce allows Object Injection. This issue affects EmpikPlace for Woocommerce: from n/a through 1.4.2.

Other sources

Deserialization of Untrusted Data vulnerability in empik EmpikPlace for Woocommerce empik-for-woocommerce allows Object Injection.This issue affects EmpikPlace for Woocommerce: from n/a through <= 1.4.3.

— MITRE

Affected Software

1 affected component

Empik EmpikPlace for Woocommerce<=1.4.3

Event History

Apr 11, 2025

CVE Published

via MITRE·08:42 AM

Data Sourced

via MITRE·08:42 AM

DescriptionWeakness

Data Sourced

via NVD·09:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates network-based exploitation with low attack complexity. It requires no authentication or user interaction.

What could successful exploitation affect?

The CVSS assessment rates confidentiality, integrity, and availability impact as high. The overall CVSS v3.1 score is 9.8 (Critical).

CVE-2025-32568: WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could successful exploitation affect?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could successful exploitation affect?