CVE-2025-49073: WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability
Published Jun 6, 2025
·Updated
Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.
Affected Software
3 affected components
axiomthemes Sweet Dessert<1.1.13
WordPress Sweet Dessert<1.1.13
axiomthemes Sweet Dessert Wordpress<1.1.13
Remediation
Information
Update the WordPress Sweet Dessert theme to the latest available version (at least 1.1.13).
Event History
Jun 6, 2025
CVE Published
via MITRE·12:13 PM
Data Sourced
via MITRE·12:13 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-49073?
CVE-2025-49073 is classified as a high severity vulnerability due to its potential for object injection attacks.
2
How do I fix CVE-2025-49073?
To fix CVE-2025-49073, you should upgrade Axiomthemes Sweet Dessert to version 1.1.13 or later.
3
What are the implications of CVE-2025-49073?
The implications of CVE-2025-49073 include the risk of remote code execution and unauthorized access to sensitive data.
4
Which versions of Sweet Dessert are affected by CVE-2025-49073?
Axiomthemes Sweet Dessert versions before 1.1.13 are affected by CVE-2025-49073.
5
How can CVE-2025-49073 be exploited?
CVE-2025-49073 can be exploited by sending crafted serialized data to the application, leading to potential object injection.