Description
Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection.
This issue affects Lagom: from n/a through 2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeton | Lagom | ≤ 2.0 | — |
Critical · 9.8
CVE-2025-60229
EUVD-2025-210243GHSA-7ggh-p7v4-mmgg
WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack