CVE-2025-49073: Axiomthemes Sweet Dessert

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.

Affected products

• Axiomthemes Sweet Dessert: before 1.1.13 (fixed in 1.1.13)

Published 2025-06-06. Last modified 2026-06-17.