Critical · 9.8 CVE-2025-23914 EUVD-2025-3529GHSA-x2gh-m7mc-2xf3

WordPress Muzaara Google Ads Report Plugin <= 3.1 - PHP Object Injection vulnerability

Published Jan 22, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: muzaara Product: Muzaara Google Ads Report

Description

Deserialization of Untrusted Data vulnerability in muzaara Muzaara Google Ads Report muzaara-adwords-optimize-dashboard allows Object Injection.This issue affects Muzaara Google Ads Report: from n/a through <= 3.1.

Affected products

Vendor	Product	Affected	Fixed
muzaara	Muzaara Google Ads Report	≤ 3.1	—

References

https://patchstack.com/database/Wordpress/Plugin/muzaara-adwords-optimize-dashboard/vulnerability/wordpress-muzaara-google-ads-report-plugin-3-1-php-object-injection-vulnerability?_s_id=cve vdb-entry