Skip to content
OpenAdvisories

Product · ThemeGoods

Altair

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-32928

    WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.

    ThemeGoods Altair
  • Critical 9.8
    CVE-2024-12922

    Altair <= 5.2.4 - Unauthenticated Arbitrary Options Update via pp_import_current

    The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthentica…

    ThemeGoods Altair Web / CMS