Deserialization Vulnerability in DesignThemes Visual Art | Gallery Theme
CVE-2025-31422

8.8HIGH

Key Information:

Vendor

WordPress
Status
Visual Art | Gallery WordPress Theme
Vendor
CVE Published:
16 July 2025

What is CVE-2025-31422?

The Visual Art | Gallery WordPress Theme developed by DesignThemes contains a vulnerability that allows for the deserialization of untrusted data, which may lead to object injection attacks. This issue impacts versions from n/a through 2.4, potentially exposing users to remote code execution or manipulation of site data. It is crucial for users of this theme to apply updates or other security measures to mitigate risks.

Affected Version(s)

Visual Art | Gallery WordPress Theme <= 2.4

References

https://patchstack.com/database/wordpress/theme/visual-ar...
vdb-entry

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) (Patchstack Alliance)
.
CVE-2025-31422 : Deserialization Vulnerability in DesignThemes Visual Art | Gallery Theme