Object Injection Vulnerability in ConveyThis Language Translate Widget for WordPress

CVE-2025-57919

What is CVE-2025-57919?

The ConveyThis Language Translate Widget for WordPress is susceptible to a vulnerability that permits deserialization of untrusted data, leading to potential object injection. This flaw can be exploited by attackers to execute arbitrary code or gain unauthorized access to sensitive data, particularly affecting versions from n/a up to 264. It is crucial for WordPress users employing this plugin to review their configurations and apply necessary updates to mitigate any security risks.

References