CVE-2025-60214
Published: 22 October 2025
Summary
CVE-2025-60214 is a critical-severity Deserialization of Untrusted Data (CWE-502) vulnerability. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 27.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Flaw remediation directly mitigates the deserialization vulnerability by applying the patch to Goldenblatt theme version 1.3.0 or later.
Information input validation prevents object injection by validating untrusted data prior to deserialization in the WordPress theme.
Vulnerability monitoring and scanning detects the CVE-2025-60214 deserialization flaw in vulnerable Goldenblatt theme versions.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The vulnerability is a high-severity deserialization flaw (CWE-502) in a public-facing WordPress theme, exploitable remotely by unauthenticated attackers without user interaction, enabling arbitrary code execution, which directly maps to T1190: Exploit Public-Facing Application.
NVD Description
Deserialization of Untrusted Data vulnerability in BoldThemes Goldenblatt goldenblatt allows Object Injection.This issue affects Goldenblatt: from n/a through < 1.3.0.
Deeper analysisAI
CVE-2025-60214 is a Deserialization of Untrusted Data vulnerability (CWE-502) in the BoldThemes Goldenblatt WordPress theme that allows Object Injection. Published on 2025-10-22, this issue affects Goldenblatt versions from n/a through less than 1.3.0.
The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it can be exploited remotely by unauthenticated attackers with low attack complexity and no user interaction required. Successful exploitation enables high-impact compromise of confidentiality, integrity, and availability, potentially allowing arbitrary code execution or other severe effects via injected objects.
The Patchstack advisory at https://patchstack.com/database/Wordpress/Theme/goldenblatt/vulnerability/wordpress-goldenblatt-theme-1-2-1-php-object-injection-vulnerability?_s_id=cve details the vulnerability in the Goldenblatt theme, with mitigation achieved by updating to version 1.3.0 or later.
Details
- CWE(s)