CVE-2025-31069

Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - audit@patchstack.com

Published

2025-05-23

Last modified

2026-04-28

Weaknesses

CWE-502

Affected products

• Hotstar Multi-purpose Business Theme (Themeton)

References

• https://patchstack.com/database/wordpress/theme/hotstar/vulnerability/wordpress-hotstar-multi-purpose-business-theme-1-…