Description
Deserialization of Untrusted Data vulnerability in BoldThemes Addison addison allows Object Injection.This issue affects Addison: from n/a through < 1.4.8.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldThemes | Addison | ≤ 1.4.8 | — |
Critical · 9.8
CVE-2025-60216
EUVD-2025-35410GHSA-qrmp-x6cw-44g4
WordPress Addison theme < 1.4.8 - PHP Object Injection vulnerability
Published Oct 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack