Critical · 9.8 CVE-2025-22526 EUVD-2025-14964GHSA-7hhx-mfrf-57rx

WordPress PHP/MySQL CPU performance statistics Plugin <= 1.2.1 - PHP Object Injection vulnerability

Published Mar 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mywebtonet Product: PHP/MySQL CPU performance statistics

Description

Deserialization of Untrusted Data vulnerability in mywebtonet PHP/MySQL CPU performance statistics mywebtonet-performancestats allows Object Injection.This issue affects PHP/MySQL CPU performance statistics: from n/a through <= 1.2.1.

Affected products

Vendor	Product	Affected	Fixed
mywebtonet	PHP/MySQL CPU performance statistics	≤ 1.2.1	—

References

https://patchstack.com/database/Wordpress/Plugin/mywebtonet-performancestats/vulnerability/wordpress-php-mysql-cpu-performance-statistics-plugin-1-2-1-php-object-injection-vulnerability?_s_id=cve vdb-entry