CVE-2025-60225: WordPress BugsPatrol theme <= 1.5.0 - PHP Object Injection vulnerability
Published Oct 22, 2025
·Updated
Deserialization of Untrusted Data vulnerability in AncoraThemes BugsPatrol bugspatrol allows Object Injection.This issue affects BugsPatrol: from n/a through <= 1.5.0.
Affected Software
2 affected components
AncoraThemes BugsPatrol<=1.5.0
WordPress BugsPatrol<=1.5.0
Event History
Oct 22, 2025
CVE Published
via MITRE·02:32 PM
Data Sourced
via MITRE·02:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-60225?
CVE-2025-60225 is classified as a high-severity vulnerability due to its potential for object injection and misuse.
2
How do I fix CVE-2025-60225?
To fix CVE-2025-60225, update AncoraThemes BugsPatrol to version 1.5.1 or later.
3
What type of vulnerability is CVE-2025-60225?
CVE-2025-60225 is a deserialization of untrusted data vulnerability that allows for object injection.
4
Which software versions are affected by CVE-2025-60225?
CVE-2025-60225 affects AncoraThemes BugsPatrol versions from n/a through 1.5.0 inclusive.
5
What are the potential impacts of CVE-2025-60225?
The potential impacts of CVE-2025-60225 include remote code execution and unauthorized access to sensitive data.