High · 8.1 CVE-2025-53583 EUVD-2025-25983GHSA-36p7-pvq8-jjmx

WordPress Employee Spotlight Plugin <= 5.1.1 - PHP Object Injection Vulnerability

Published Aug 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: emarket-design Product: Employee Spotlight

Description

Deserialization of Untrusted Data vulnerability in emarket-design Employee Spotlight employee-spotlight allows Object Injection.This issue affects Employee Spotlight: from n/a through <= 5.1.1.

Affected products

Vendor	Product	Affected	Fixed
emarket-design	Employee Spotlight	≤ 5.1.1	—

References

https://patchstack.com/database/Wordpress/Plugin/employee-spotlight/vulnerability/wordpress-employee-spotlight-plugin-5-1-1-php-object-injection-vulnerability?_s_id=cve vdb-entry