Critical · 9.8 CVE-2025-31430 EUVD-2025-27805GHSA-v7cm-mpcm-37f9

WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability

Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1.

Affected products

Vendor	Product	Affected	Fixed
themeton	The Business	≤ 1.6.1	—

References

https://patchstack.com/database/wordpress/theme/nrgbusiness/vulnerability/wordpress-the-business-1-6-1-php-object-injection-vulnerability?_s_id=cve vdb-entry