CVE-2025-49072: WordPress Mr. Murphy < 1.2.12.1 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy allows Object Injection.This issue affects Mr. Murphy: from n/a before 1.2.12.1.
Other sources
Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through < 1.2.12.1.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49072?
CVE-2025-49072 has not been assigned a formal severity rating, but deserialization of untrusted data vulnerabilities are generally considered high risk.
How do I fix CVE-2025-49072?
To fix CVE-2025-49072, update AncoraThemes Mr. Murphy to version 1.2.12.1 or later.
What does CVE-2025-49072 affect?
CVE-2025-49072 affects versions of Mr. Murphy before 1.2.12.1.
What kind of vulnerability is CVE-2025-49072?
CVE-2025-49072 is a deserialization of untrusted data vulnerability that allows for object injection.
Who is affected by CVE-2025-49072?
Users of AncoraThemes Mr. Murphy running versions before 1.2.12.1 are affected by CVE-2025-49072.