CVE-2025-53303

LOWCVSS 8.8 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Deserialization of Untrusted Data vulnerability in ThemeMove ThemeMove Core thememove-core allows Object Injection.This issue affects ThemeMove Core: from n/a through <= 1.4.2.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/thememove-core/vulnerability/wordpress-thememove-core-plugin-1-4-2-php-object-injection-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

DFIR Lab@DFIR_Lab1d
🚨 HIGH SEVERITY: CVE-2025-53303 (CVSS 8.8) Deserialization flaw in ThemeMove Core plugin (≤1.4.2) allows Object Injection. Network-exploitable with low complexity. Patch immediately if using affected versions. #CVE #Vulnerability #PatchNow https://t.co/O1sFp0gJBn
0000015
150 followersView on X

Explore more

Back to dashboard