CVE-2025-69404

Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through <= 1.5.10.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - audit@patchstack.com

Published

2026-02-20

Last modified

2026-04-28

Weaknesses

CWE-502

Affected products

• Extreme Store (Themerex)

References

• https://patchstack.com/database/Wordpress/Theme/extremestore/vulnerability/wordpress-extreme-store-theme-1-5-7-php-obje…