CVE-2025-31919
BaseFortify
Publication date: 2025-06-17
Last updated on: 2026-04-28
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-31919 is a high-severity PHP Object Injection vulnerability in the WordPress Spare theme versions up to 1.7. It allows unauthenticated attackers to perform PHP Object Injection, which can lead to code injection, SQL injection, path traversal, denial of service, and other attacks if a suitable Property Oriented Programming (POP) chain is present. This vulnerability arises from deserialization of untrusted data, making it highly dangerous and likely to be widely exploited. [1]
How can this vulnerability impact me? :
This vulnerability can have severe impacts including unauthorized code execution, database compromise through SQL injection, file system access via path traversal, denial of service, and potentially other attacks depending on the context. Since it can be exploited without authentication, it poses a significant risk to affected websites, potentially leading to full site compromise or data breaches. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
The provided resources do not include specific commands or detailed methods for detecting this vulnerability on your network or system. However, Patchstack recommends professional incident response and server-side malware scanning to identify compromises related to this vulnerability. Plugin-based malware scanners are discouraged as they can be tampered with by malware. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the Patchstack virtual patch (vPatch) which blocks attack attempts until an official fix is released. Since no official patch is currently available, this virtual patch provides the fastest protection. Additionally, it is recommended to perform professional incident response and server-side malware scanning if a site is suspected to be compromised. [1]