PT-2025-43285 · WordPress · Tf Woo Product Grid Addon For Elementor

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-59007

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions themesflat TF Woo Product Grid Addon For Elementor versions through 1.0.1

Description The software contains a flaw related to the deserialization of untrusted data, which allows for object injection. This issue impacts TF Woo Product Grid Addon For Elementor.

Recommendations Update TF Woo Product Grid Addon For Elementor to a version newer than 1.0.1.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-59007

Affected Products

Tf Woo Product Grid Addon For Elementor

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-59007 · Security Note
• https://twitter.com/CVEnew/status/1981046897096999322 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Plugin/tf-woo-product-grid/vulnerability/wordpress-tf-woo-product-grid-addon-for-elementor-plugin-1-0-1-deserialization-of-untrusted-data-vulnerability · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/tf-woo-product-grid/vulnerability/wordpress-tf-woo-product-grid-addon-for-elementor-plugin-1-0-1-deserialization-of-untrusted-data-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/tf-woo-product-grid/vulnerability/wordpress-tf-woo-product-grid-addon-for-elementor-plugin-1-0-1-deserialization-of-untrusted-data-vulnerability?_s_id=cve · Note