ThemeGoods

Records57All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

ThemeGoods records in CISA KEV

No ThemeGoods vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Grand Restaurant 6 records MEDIUM Grand Conference 3 records MEDIUM Photography 3 records MEDIUM Altair 1 record MEDIUM Grand Tour 1 record MEDIUM

Records

1 record in Altair · all components

TI-2025-23949 CVE-2025-32928 · GHSA-848q-rw57-4rf8

WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

MEDIUM 49

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502

Open these records in search →

Critical	14
High	28
Medium	15
Low	0
No CVSS	0