CVE-2025-60213 — AI Deep Analysis Summary

Q: Who is affected? (Versions/Components)

🏢 **Vendor**: Whitebox-Studio. 📦 **Product**: Scape (WordPress Plugin/Theme). 📅 **Affected Versions**: **1.5.13 and earlier**. If you are on this version, you are at risk!

Q: Is exploitation threshold high? (Auth/Config)

🔓 **Exploitation Threshold**: **LOW**. 🌐 **Vector**: Network (AV:N). 🔑 **Auth**: None required (PR:N). 👀 **UI**: None required (UI:N). ✅ **Easy to exploit** for any internet-facing instance.

Q: Is there a public Exp? (PoC/Wild Exploitation)

📜 **Public Exploit**: **No PoC available** in the provided data. ⚠️ **Risk**: Despite no public PoC, the CVSS score is **Critical (9.8)**. Assume it is exploitable by skilled attackers immediately.

Q: Is it fixed officially? (Patch/Mitigation)

🛠️ **Fix Status**: **Patch Available**. 📥 **Action**: Update **Whitebox-Studio Scape** to the latest version immediately. 🔗 **Ref**: Patchstack database entry confirms the vulnerability details.

Q: Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL (Priority 1)**. ⏱️ **CVSS Score**: **9.8/10**. 🚀 **Recommendation**: Patch **IMMEDIATELY**. This is a high-severity, easily exploitable vulnerability affecting core functionality.

Updated May 08, 2026 CVSS 9.8 · Critical

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical **PHP Object Injection** flaw in the WordPress plugin/theme **Whitebox-Studio Scape**.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-502** (Deserialization of Untrusted Data).…

Read full answer (login)

Q3Who is affected? (Versions/Components)

🏢 **Vendor**: Whitebox-Studio. <br>📦 **Product**: Scape (WordPress Plugin/Theme). <br>📅 **Affected Versions**: **1.5.13 and earlier**. If you are on this version, you are at risk!

Q4What can hackers do? (Privileges/Data)

🕵️ **Attacker Capabilities**: <br>1️⃣ **Full Control**: Execute arbitrary PHP code. <br>2️⃣ **Data Access**: Read/Modify sensitive database contents.…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Exploitation Threshold**: **LOW**. <br>🌐 **Vector**: Network (AV:N). <br>🔑 **Auth**: None required (PR:N). <br>👀 **UI**: None required (UI:N). <br>✅ **Easy to exploit** for any internet-facing instance.

Q6Is there a public Exp? (PoC/Wild Exploitation)

📜 **Public Exploit**: **No PoC available** in the provided data. <br>⚠️ **Risk**: Despite no public PoC, the CVSS score is **Critical (9.8)**. Assume it is exploitable by skilled attackers immediately.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1️⃣ Check your WordPress dashboard for **Whitebox-Studio Scape** version. <br>2️⃣ If version ≤ **1.5.13**, you are vulnerable.…

Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Fix Status**: **Patch Available**. <br>📥 **Action**: Update **Whitebox-Studio Scape** to the latest version immediately. <br>🔗 **Ref**: Patchstack database entry confirms the vulnerability details.

Q9What if no patch? (Workaround)

🚧 **No Patch Workaround**: <br>1️⃣ **Disable/Deactivate** the Scape plugin/theme immediately. <br>2️⃣ **Remove** it from the server if not needed.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL (Priority 1)**. <br>⏱️ **CVSS Score**: **9.8/10**. <br>🚀 **Recommendation**: Patch **IMMEDIATELY**. This is a high-severity, easily exploitable vulnerability affecting core functionality.

Continue exploring

Vulnerability detail Full AI analysis (login) Whitebox-Studio CWE-502