Description
Deserialization of Untrusted Data vulnerability in LoftOcean PatioTime patiotime allows Object Injection.This issue affects PatioTime: from n/a through < 2.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LoftOcean | PatioTime | ≤ 2.1 | — |
Critical · 9.8
CVE-2025-67995
EUVD-2025-208057GHSA-jjpv-2mhh-mcmm
WordPress PatioTime theme < 2.1 - PHP Object Injection vulnerability
Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack