Themeton vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Themeton products: 5 record(s), with severity, exploitation and fixes.

Zuut 1 Finag 1 Consult Aid 1 The Barber Shop 1 Lagom 1

Exploited only (KEV) →

CVE-2025-60230 Critical · 9.8 CWE-502 Jun 17, 2026

WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9.

CVE-2025-60229 Critical · 9.8 CWE-502 Jun 17, 2026

WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0.

CVE-2025-60237 Critical · 9.8 CWE-502 Mar 19, 2026

WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeton Finag allows Object Injection.This issue affects Finag: from n/a through 1.5.0.

CVE-2025-60233 Critical · 9.8 CWE-502 Mar 19, 2026

WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.

CVE-2025-67617 Critical · 9.8 CWE-502 Jan 22, 2026

WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through <= 1.4.3.