MAL-2025-17003 Malicious code in chromedriver-websockets-altair-superagent (npm)

The package chromedriver-websockets-altair-superagent was found to contain malicious code...

MAL-2025-33995 Malicious code in stop-neutrino-altair-astrobiology (npm)

The package stop-neutrino-altair-astrobiology was found to contain malicious code...

MAL-2025-14407 Malicious code in altair-publish-semantic-ui-prompts (npm)

The package altair-publish-semantic-ui-prompts was found to contain malicious code...

MAL-2025-29082 Malicious code in perturbation-altair-sedna-eridanus (npm)

The package perturbation-altair-sedna-eridanus was found to contain malicious code...

MAL-2025-18726 Malicious code in draco-altair-sirius-jest (npm)

The package draco-altair-sirius-jest was found to contain malicious code...

CVE-2024-54147

Altair is a GraphQL client for all platforms. Prior to version 8.0.5, Altair GraphQL Client's desktop app does not validate HTTPS certificates allowing a man-in-the-middle to intercept all requests. Any Altair users on untrusted networks eg. public wifi, malicious DNS servers may have all GraphQL...

CVE-2023-43799

Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them to the underlying system. Moreover, Altair GraphQL Client also does not isolate the context of the renderer process. This affects versions of the...

CVE-2019-15719

Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbsmom, which fails to properly authenticate the message. This results in code execution as an arbitrary user...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through = 5.2.2...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through = 5.2.2...

CVE-2025-32928

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair allows Object Injection.This issue affects Altair: from n/a through 5.2.2...

CVE-2025-32928 WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair altair allows Object Injection.This issue affects Altair: from n/a through = 5.2.2...

CVE-2025-32928 WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeGoods Altair allows Object Injection.This issue affects Altair: from n/a through 5.2.2...

CVE-2025-32928

CVE-2025-32928 concerns WordPress Theme Altair (ThemeGoods Altair) versions n/a through 5.2.2, with Unsigned PHP Object Injection resulting from deserialization of untrusted data. The vulnerability is described as an unauthenticated PHP object injection in Altair

PT-2025-22090 · Themegoods · Themegoods Altair

Name of the Vulnerable Software and Affected Versions: ThemeGoods Altair versions n/a through 5.2.2 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 5.2.2, update to a version later than 5.2.2 to resol...

WordPress plugin Altair 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

WordPress Altair theme <= 5.2.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds Patchstack Alliance in WordPress Theme Altair versions = 5.2.2...

WordPress Altair Theme <= 5.2.2 is vulnerable to PHP Object Injection

Software Altair Type Theme Vulnerable versions = 5.2.2 Fixed in N/A OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2025-32928 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 644e001022df Credits Bonds Required privilege Unauthenticated Published 2...

altair.es Cross Site Scripting vulnerability OBB-4040583

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-12922

The Altair theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check within functions.php in all versions up to, and including, 5.2.4. This makes it possible for unauthenticated attackers to update arbitrary...