Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in PIMP – Creative MultiPurpose Theme 1.7

  • Severity: critical
  • Status: Open
  • Publication: June 3, 2025

The PIMP theme for WordPress has a security issue called PHP Object Injection, which can be exploited by hackers. This vulnerability exists in all versions up to 1.7 and can be triggered by using untrusted input. This can allow attackers to insert a PHP Object. However, this vulnerability will not have any impact unless the website has another plugin or theme that also has a similar issue. If such a plugin or theme is present, the attacker may be able to delete files, access sensitive information, or run code on the website.

Detected in:

PIMP - Creative MultiPurpose Theme open vulnerable versions: >= * <= 1.7

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.