Description
Deserialization of Untrusted Data vulnerability in BoldThemes Nestin nestin allows Object Injection.This issue affects Nestin: from n/a through < 1.2.6.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldThemes | Nestin | ≤ 1.2.6 | — |
Critical · 9.8
CVE-2025-67996
EUVD-2025-208058GHSA-rr5c-93pp-mqfv
WordPress Nestin theme < 1.2.6 - PHP Object Injection vulnerability
Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack