Description
Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeton | Zuut | ≤ 1.4.2 | — |
Critical · 9.8
CVE-2025-60233
EUVD-2025-208861GHSA-ppmc-4vgv-73hc
WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerability
Published Mar 19, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack