CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-39349

Deserialization of Untrusted Data vulnerability in Potenzaglobalsolutions CiyaShop ciyashop allows Object Injection.This issue affects CiyaShop: from n/a through <= 4.18.0.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.8%

CVSS Severity

CVSS v3 Score 9.8

References

https://patchstack.com/database/Wordpress/Theme/ciyashop/vulnerability/wordpress-ciyashop-theme-4-18-0-php-object-injection-vulnerability?_s_id=cve

Products affected by CVE-2025-39349

Potenzaglobalsolutions » Ciyashop » Version: Any

cpe:2.3:a:potenzaglobalsolutions:ciyashop:*

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-39349

Products

Pricing

Contact Us