CVE-2025-39550: WordPress FluentCommunity plugin <= 1.2.15 - PHP Object Injection Vulnerability

Q: What is the severity of CVE-2025-39550?

CVE-2025-39550 is classified as a high severity vulnerability due to its potential for object injection and exploitation.

Q: How do I fix CVE-2025-39550?

To fix CVE-2025-39550, update Shahjahan Jewel FluentCommunity to the latest version beyond 1.2.15.

Q: What vulnerabilities does CVE-2025-39550 expose in FluentCommunity?

CVE-2025-39550 exposes the risk of deserialization of untrusted data, allowing for potential remote code execution.

Q: Which versions of FluentCommunity are affected by CVE-2025-39550?

CVE-2025-39550 affects FluentCommunity versions from n/a to 1.2.15.

Q: Is CVE-2025-39550 specific to a particular platform?

CVE-2025-39550 is primarily associated with Shahjahan Jewel FluentCommunity and WordPress FluentCommunity.

Published Apr 17, 2025

Updated

Deserialization of Untrusted Data vulnerability in Shahjahan Jewel FluentCommunity allows Object Injection. This issue affects FluentCommunity: from n/a through 1.2.15.

Other sources

Deserialization of Untrusted Data vulnerability in Shahjahan Jewel FluentCommunity fluent-community allows Object Injection.This issue affects FluentCommunity: from n/a through <= 1.2.15.

— MITRE

Affected Software

1 affected component

Shahjahan Jewel FluentCommunity<=1.2.15

Remediation

Information

Update the WordPress FluentCommunity plugin to the latest available version (at least 1.3.1).

Event History

Apr 17, 2025

CVE Published

via MITRE·03:46 PM

Data Sourced

via MITRE·03:46 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Jun 15, 57318

Event

via FIRST·06:20 PM

Frequently Asked Questions

What is the severity of CVE-2025-39550?