CVE-2025-69035
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-01-28
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| strongholdthemes | dental_care_cpt | to 20.2 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-502 | The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-69035 is a PHP Object Injection vulnerability in the WordPress Dental Care CPT Plugin (versions up to 20.2). It allows attackers to inject malicious PHP objects, potentially leading to severe attacks such as code injection, SQL injection, path traversal, and denial of service if a suitable Property Oriented Programming (POP) chain is available. This vulnerability falls under the OWASP Top 10 category A3: Injection. [1]
How can this vulnerability impact me? :
This vulnerability can allow a malicious actor to execute arbitrary code, manipulate database queries, access unauthorized files, or cause denial of service on affected WordPress sites using the Dental Care CPT Plugin. Exploitation requires at least contributor or developer privileges, but if successful, it can severely compromise the security and availability of the website. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
The provided resources do not include specific commands or methods to detect this vulnerability on your network or system.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying the mitigation rule issued by Patchstack to block attacks targeting this vulnerability until an official patch is released. This mitigation requires at least contributor or developer privileges to be effective. Additionally, using Patchstack's automated vulnerability mitigation and continuous security intelligence services is recommended to protect affected WordPress sites. [1]