CVE-2025-68903: WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

Q: What could a successful exploit allow?

The vulnerability is rated high severity with impacts to confidentiality, integrity, and availability all assessed as high. It could expose sensitive data, allow unauthorized modification, and disrupt affected systems.

Q: Which Anona versions are affected?

Anona versions through 8.0 are affected. The available data does not identify a fixed version.

Published Jan 22, 2026

Updated

Deserialization of Untrusted Data vulnerability in AivahThemes Anona anona allows Object Injection.This issue affects Anona: from n/a through <= 8.0.

Affected Software

2 affected components

Aivahthemes Anona<=8.0

wordpress/anona<=8.0

Event History

Jan 22, 2026

CVE Published

via MITRE·04:52 PM

Data Sourced

via MITRE·04:52 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that an attacker needs low-level privileges. Exploitation does not require user interaction and can be performed over the network.

What could a successful exploit allow?

The vulnerability is rated high severity with impacts to confidentiality, integrity, and availability all assessed as high. It could expose sensitive data, allow unauthorized modification, and disrupt affected systems.

Which Anona versions are affected?

Anona versions through 8.0 are affected. The available data does not identify a fixed version.

CVE-2025-68903: WordPress Anona theme <= 8.0 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could a successful exploit allow?

Which Anona versions are affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could a successful exploit allow?

Which Anona versions are affected?