CVE-2025-48289: WordPress Kids Planet theme <= 2.2.14 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet allows Object Injection. This issue affects Kids Planet: from n/a through 2.2.14.
Other sources
Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-48289?
CVE-2025-48289 is considered a critical vulnerability due to its potential for object injection attacks.
How do I fix CVE-2025-48289?
To fix CVE-2025-48289, update the Kids Planet theme to version 2.2.15 or later.
What causes CVE-2025-48289?
CVE-2025-48289 is caused by the deserialization of untrusted data which allows object injection vulnerabilities.
Who is affected by CVE-2025-48289?
CVE-2025-48289 affects users of AncoraThemes Kids Planet from version n/a up to 2.2.14.
What are the potential impacts of CVE-2025-48289?
The potential impacts of CVE-2025-48289 include unauthorized code execution and data manipulation.