Description
Deserialization of Untrusted Data vulnerability in themeton Acerola allows Object Injection. This issue affects Acerola: from n/a through 1.6.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| themeton | Acerola | ≤ 1.6.5 | — |
Critical · 9.8
CVE-2025-31927
EUVD-2025-27816GHSA-3grc-cj2m-fpc6
WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability
Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack