Description
Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rascals | Noisa | ≤ 2.6.0 | — |
Critical · 9.8
CVE-2025-60039
EUVD-2025-35428GHSA-jqw6-g9q9-cwhq
WordPress Noisa theme <= 2.6.0 - PHP Object Injection vulnerability
Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack