Advisories · Technology

iThemes ServerBuddy by PluginBuddy.com.

Every CVE that names iThemes ServerBuddy by PluginBuddy.com among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-49895 CVE record

CVSS 6.5 Medium

WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability
- iThemes ServerBuddy by PluginBuddy.com
- Cross-site request forgery (CSRF)
Not analysed yet 16 Aug 2025