Known vulnerabilities in ThemeGoods Capella
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-15688 | Unauthenticated SQL Injection in Capella <= 2.5.5 versions | 9.3 Critical | Aug 20, 2026 |
| CVE-2025-15689 | Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions | 9.8 Critical | Aug 20, 2026 |
| CVE-2025-69370 | Deserialization of Untrusted Data vulnerability in ThemeGoods Capella capella allows Object Injection.This issue affects… | 9.8 Critical | Feb 20, 2026 |