CVE-2025-49438

—

CVSS 3.1

8.1 high

EPSS

<1%p34

Published

Aug 20, 2025 (Aug 20, 2025)

Modified

Jun 17, 2026

Description

Deserialization of Untrusted Data vulnerability in Max Chirkov Simple Login Log allows Object Injection. This issue affects Simple Login Log: from n/a through 1.1.3.

Ecosystems: WordPress
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.