Object Injection Vulnerability in Fetch Designs Sign-up Sheets Plugin

CVE-2025-49393

What is CVE-2025-49393?

The Fetch Designs Sign-up Sheets plugin for WordPress is vulnerable to a deserialization of untrusted data, which can lead to object injection. This vulnerability affects all versions up to and including 2.3.2. An attacker could exploit this issue to execute malicious code or alter application behavior, compromising the security of websites using the affected plugin. It's crucial for users to update their installations to the latest version to mitigate such security risks.

References