Description
Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Whitebox-Studio | Scape | ≤ 1.5.13 | — |
Critical · 9.8
CVE-2025-60213
EUVD-2025-35413GHSA-q974-rx8r-xw34
WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability
Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack