9.8
Critical
CVE-2025-49434 Deserialization of Untrusted Data vulnerability in axiomthemes Cars4Rent cars4rent allows Object Injection.This issue…
Description
Deserialization of Untrusted Data vulnerability in axiomthemes Cars4Rent cars4rent allows Object Injection.This issue affects Cars4Rent: from n/a through <= 1.4.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Laposta WooCommerce 1.9 | earliest → 1.9.1 | No fix stated |
| Cars4Rent 1.4 | earliest → 1.4.2 | No fix stated |