9.8
Critical
CVE-2025-48289 Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This…
Description
Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Kids Planet 2.2 | earliest → 2.2.14 | No fix stated |