Description
Deserialization of Untrusted Data vulnerability in BoldThemes Celeste celeste allows Object Injection.This issue affects Celeste: from n/a through <= 1.3.6.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BoldThemes | Celeste | ≤ 1.3.6 | — |
High · 8.1
CVE-2026-27369
EUVD-2026-9627GHSA-56f8-pjc6-475m
WordPress Celeste theme <= 1.3.6 - PHP Object Injection vulnerability
Published Mar 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack