High severity8.8NVD Advisory· Published Mar 25, 2026· Updated Apr 24, 2026
CVE-2026-25358
CVE-2026-25358
Description
Deserialization of Untrusted Data vulnerability in rascals Meloo meloo allows Object Injection.This issue affects Meloo: from n/a through < 2.8.2.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (March 23, 2026 to March 29, 2026)Wordfence Blog · Apr 2, 2026