CVE-2025-53465
BaseFortify
Publication date: 2025-09-22
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| patchstack | gsheets_connector | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a PHP Object Injection issue in the WordPress GSheets Connector Plugin (up to version 1.1.1). It allows a malicious actor with administrator privileges to inject objects that can lead to various attacks such as code injection, SQL injection, path traversal, and denial of service, if a suitable PHP Object Injection POP chain is available. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to severe impacts including unauthorized code execution, data manipulation via SQL injection, unauthorized file access through path traversal, and denial of service attacks. These impacts can compromise the confidentiality, integrity, and availability of your system. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves monitoring for signs of PHP Object Injection exploitation attempts, such as unusual PHP object deserialization activities or suspicious requests targeting the GSheets Connector plugin. Since no specific detection commands are provided, it is recommended to perform server-side malware scanning and professional incident response for compromised sites. Plugin-based malware scanners are not reliable as they can be tampered with by malware. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying virtual patching (vPatching) offered by Patchstack, which automatically protects against this vulnerability without requiring an official patch. Additionally, restricting administrator privileges and monitoring for exploitation attempts can help reduce risk. For compromised systems, seek professional incident response and perform server-side malware scanning. [1]