Description
Deserialization of Untrusted Data vulnerability in NooTheme Yogi yogi allows Object Injection.This issue affects Yogi: from n/a through < 2.9.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NooTheme | Yogi | ≤ 2.9.3 | — |
High · 8.8
CVE-2025-24779
EUVD-2025-21599GHSA-x8r9-8p38-g877
WordPress Yogi theme < 2.9.3 - PHP Object Injection Vulnerability
Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack