CVE-2025-59007: themesflat TF Woo Product Grid Addon For Elementor

Описание

Оригинално описание

Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For Elementor tf-woo-product-grid allows Object Injection.This issue affects TF Woo Product Grid Addon For Elementor: from n/a through <= 1.0.1.

Засегнати продукти

• themesflat TF Woo Product Grid Addon For Elementor: до 1.0.1

Вид слабост

• CWE-502 Десериализация на ненадеждни данни

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-59007
• https://nvd.nist.gov/vuln/detail/CVE-2025-59007
• https://patchstack.com/database/Wordpress/Plugin/tf-woo-product-grid/vulnerability/wordpress-tf-woo-product-grid-addon-for-elementor-plugin-1-0-1-deserialization-of-untrusted-data-vulnerability?_s_id=cve