9.8
Critical
CVE-2025-49072 Deserialization of Untrusted Data vulnerability in AncoraThemes Mr
Description
Deserialization of Untrusted Data vulnerability in AncoraThemes Mr. Murphy mr-murphy allows Object Injection.This issue affects Mr. Murphy: from n/a through < 1.2.12.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mr. Murphy 1.2 | earliest → 1.2.12.1 | No fix stated |