CVE-2025-39527: WordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in bestweblayout Rating by BestWebSoft rating-bws allows Object Injection.This issue affects Rating by BestWebSoft: from n/a through <= 1.7.
Other sources
Deserialization of Untrusted Data vulnerability in bestwebsoft Rating by BestWebSoft allows Object Injection. This issue affects Rating by BestWebSoft: from n/a through 1.7.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39527?
CVE-2025-39527 is categorized as a high-severity vulnerability due to its potential for object injection exploits.
How do I fix CVE-2025-39527?
To fix CVE-2025-39527, upgrade Rating by BestWebSoft to version 1.8 or later.
Who is affected by CVE-2025-39527?
CVE-2025-39527 affects users of Rating by BestWebSoft from versions n/a up to and including 1.7.
What type of vulnerability is CVE-2025-39527?
CVE-2025-39527 is a deserialization of untrusted data vulnerability that allows for object injection.
What should I do if I cannot update to fix CVE-2025-39527?
If you cannot update, consider disabling the affected plugin until a secure version is available to mitigate risks associated with CVE-2025-39527.