CVE-2025-30985

9.8

Critical

CVE-2025-30985

15 Apr 2025

audit@patchstack.com

Awaiting Analysis

Description

Deserialization of Untrusted Data vulnerability in NotFound GNUCommerce allows Object Injection. This issue affects GNUCommerce: from n/a through 1.5.4.

Exploits

No known exploits found for this CVE.

Search Exploit-DB

References

audit@patchstack.com

https://patchstack.com/database/wordpress/plugin/gnucommerce/vulnerability/wordpress-gnucommerce-plugin-1-5-4-php-object-injection-vulnerability?_s_id=cve