CVE-2025-52740: WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability

Q: What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation does not require user interaction and can be performed over the network.

Q: What could successful exploitation allow?

The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. Successful object injection could therefore affect data disclosure, modification, or service availability.

Q: Which Boldermail versions are affected?

Boldermail versions through 2.4.0 are affected. The earliest affected version is not specified.

Published Oct 22, 2025

Updated

Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows Object Injection.This issue affects Boldermail: from n/a through <= 2.4.0.

Affected Software

2 affected components

Hernan Villanueva Boldermail<=2.4.0

WordPress Boldermail Plugin<=2.4.0

Event History

Oct 22, 2025

CVE Published

via MITRE·02:32 PM

Data Sourced

via MITRE·02:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges (PR:L). Exploitation does not require user interaction and can be performed over the network.

What could successful exploitation allow?

The vulnerability is rated high severity with high impacts to confidentiality, integrity, and availability. Successful object injection could therefore affect data disclosure, modification, or service availability.

Which Boldermail versions are affected?

Boldermail versions through 2.4.0 are affected. The earliest affected version is not specified.

CVE-2025-52740: WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection Vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Which Boldermail versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Which Boldermail versions are affected?