TI-2025-32790 CVE-2025-52740 · GHSA-3vp5-f8x5-xvc5WordPress Boldermail Plugin <= 2.4.0 - PHP Object Injection VulnerabilityPriority MEDIUM 40Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows Object Injection.This issue affects Boldermail: from n/a through <= 2.4.0.CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-10-22 · No fix listed CWE-502