CVE-2025-58839: WordPress eDS Responsive Menu Plugin <= 1.2 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu allows Object Injection. This issue affects eDS Responsive Menu: from n/a through 1.2.
Other sources
Deserialization of Untrusted Data vulnerability in aThemeArt Translations eDS Responsive Menu eds-responsive-menu allows Object Injection.This issue affects eDS Responsive Menu: from n/a through <= 1.2.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58839?
CVE-2025-58839 is classified as a critical vulnerability due to its potential for object injection through deserialization of untrusted data.
How do I fix CVE-2025-58839?
To fix CVE-2025-58839, update the aThemeArt Translations eDS Responsive Menu to version 1.3 or later.
What versions are affected by CVE-2025-58839?
CVE-2025-58839 affects versions of aThemeArt Translations eDS Responsive Menu up to and including 1.2.
What platforms are impacted by CVE-2025-58839?
CVE-2025-58839 impacts the aThemeArt Translations eDS Responsive Menu and the WordPress eDS Responsive Menu Plugin up to version 1.2.
What type of vulnerability is CVE-2025-58839?
CVE-2025-58839 is a Deserialization of Untrusted Data vulnerability that allows for object injection.