PT-2026-23138 · Themerex · Classter

CVE-2025-54001

Published

2026-03-05

Updated

2026-03-08

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThemeREX Classter versions through 2.5

Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection.

Recommendations Versions prior to 2.5 should be updated.

Fix

Deserialization of Untrusted Data

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-54001

Classter