WordPress WP Easy Contact Plugin <= 4.0.1 - PHP Object Injection Vulnerability
CVE-2025-53572

8.1HIGH

Key Information:

Vendor

WordPress
Status
WP Easy Contact
Vendor
CVE Published:
28 August 2025

What is CVE-2025-53572?

Deserialization of Untrusted Data vulnerability in emarket-design WP Easy Contact allows Object Injection. This issue affects WP Easy Contact: from n/a through 4.0.1.

Affected Version(s)

WP Easy Contact <= 4.0.1

References

https://patchstack.com/database/wordpress/plugin/wp-easy-...
vdb-entry

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
.
CVE-2025-53572 : Object Injection Vulnerability in WP Easy Contact by WordPress