PT-2025-43345 · Jobsearch · Jobsearch

Aiden · Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-62025

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JobSearch versions prior to 3.0.8

Description The software contains a flaw due to deserialization of untrusted data. This can potentially allow for malicious code execution.

Recommendations Update JobSearch to version 3.0.8 or later.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2025-62025

Affected Products

Jobsearch

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-62025 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-3-0-8-php-object-injection-vulnerability · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/wp-jobsearch/vulnerability/wordpress-jobsearch-plugin-3-0-8-php-object-injection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1981046835486814422 · Twitter Post