Description
Deserialization of Untrusted Data vulnerability in BoldThemes Avantage avantage allows Object Injection.This issue affects Avantage: from n/a through <= 2.4.9.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldThemes | Avantage | ≤ 2.4.9 | — |
Critical · 9.8
CVE-2025-39495
EUVD-2025-27962GHSA-6cfw-fhp6-2m5g
WordPress Avantage Theme <= 2.4.9 - PHP Object Injection vulnerability
Published May 23, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack