← All advisories

Critical severity9.8NVD Advisory· Published Oct 22, 2025· Updated Apr 15, 2026

CVE-2025-60039

CVE-2025-60039

Description

Deserialization of Untrusted Data vulnerability in rascals Noisa noisa allows Object Injection.This issue affects Noisa: from n/a through <= 2.6.0.

Affected products

1

rascals/Noisallm-create
Range: <=2.6.0

Patches

Vulnerability mechanics

References

1

patchstack.com/database/Wordpress/Theme/noisa/vulnerability/wordpress-noisa-theme-2-6-0-php-object-injection-vulnerabilitynvd

News mentions

0

No linked articles in our index yet.