Description
Deserialization of Untrusted Data vulnerability in Themeton Finag allows Object Injection.This issue affects Finag: from n/a through 1.5.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Themeton | Finag | ≤ 1.5.0 | — |
Critical · 9.8
CVE-2025-60237
EUVD-2025-208862GHSA-rp47-333h-6hmq
WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability
Published Mar 19, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack