Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-19 | 2 | Disclosure2 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2025-60233 Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2. https://www.cve.org/CVERecord?id=CVE-2025-60233
Post summary
The statement announces CVE-2025-60233, describing an object injection vulnerability due to deserialization of untrusted data in Themeton Zuut, without mentioning exploitation or remediation details.
🚨 CVE-2025-60233: WordPress Zuut theme <= 1.4.2 - ... PHP object injection in WordPress themes = instant RCE playground for attackers who can craft malicious serialized payl... https://zerodaysignal.com/vulnerability/CVE-2025-60233 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces a new CVE (CVE‑2025‑60233) affecting the WordPress Zuut theme, describing PHP object injection that can lead to remote code execution.
[CVE-2025-60233: CRITICAL] Deserialization of Untrusted Data vulnerability in Themeton Zuut allows Object Injection.This issue affects Zuut: from n/a through 1.4.2.#cve,CVE-2025-60233,#cybersecurity https://cvefind.com/CVE-2025-60233
Post summary
The post announces CVE‑2025‑60233, a critical deserialization flaw in Themeton Zuut that enables object injection, identifies affected versions, but offers no exploitation code or patch details.