{"action":"Upgrade auth0/wordpress to 5.1.0 or later.","affected":[{"fixed":"5.1.0","introduced":"5.0.0-BETA0"}],"component":"auth0/wordpress","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["5.1.0"],"ghsa_id":"GHSA-862m-5253-832r","id":"tcs_01M5KEYPRRCMJF0P9YBVRMX33V","modified_at":"2026-02-04T02:51:35.717732Z","published_at":"2025-06-05T01:19:24Z","references":["https://osv.dev/vulnerability/GHSA-862m-5253-832r","https://github.com/auth0/auth0-PHP/security/advisories/GHSA-v9m8-9xxp-q492","https://github.com/auth0/laravel-auth0/security/advisories/GHSA-c42h-56wx-h85q","https://github.com/auth0/symfony/security/advisories/GHSA-98j6-67v3-mw34","https://github.com/auth0/wordpress/security/advisories/GHSA-862m-5253-832r","https://nvd.nist.gov/vuln/detail/CVE-2025-48951","https://github.com/auth0/wordpress"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-862m-5253-832r","url":"https://osv.dev/vulnerability/GHSA-862m-5253-832r"}],"summary":"Auth0 Wordpress Plugin vulnerable to Deserialization of Untrusted Data"}