Altair vulnerabilities

2 known vulnerabilities in Altair from ThemeGoods. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Altair: Deserialization of Untrusted Data

  CVE-2025-32928May 19, 2025ThemeGoods

  Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through <= 5.2.2.

• 9.8 Critical severity

  Altair: Missing Authorization

  CVE-2024-12922Mar 19, 2025ThemeGoods

  The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticat