Description
Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects Capella: from n/a through <= 2.5.5.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ThemeGoods | Capella | ≤ 2.5.5 | — |
Critical · 9.8
CVE-2025-69370
EUVD-2025-207954GHSA-p2vq-xhgq-wqqr
WordPress Capella theme <= 2.5.5 - PHP Object Injection vulnerability
Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack