Description
Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeGoods | Altair | ≤ 5.2.2 | — |
Critical · 9.8
CVE-2025-32928
EUVD-2025-15786GHSA-848q-rw57-4rf8
WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability
Published May 19, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack