← All advisories

Critical severity9.8NVD Advisory· Published Jun 17, 2025· Updated Apr 28, 2026

CVE-2025-31919

CVE-2025-31919

Description

Deserialization of Untrusted Data vulnerability in themeton Spare allows Object Injection. This issue affects Spare: from n/a through 1.7.

Affected products

1

WordPress/Sparellm-fuzzy
Range: <=1.7
Package: https://wordpress.org/themes/spare

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/theme/spare/vulnerability/wordpress-spare-1-7-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.