CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

EUVD-2026-96191

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93937

The WordPress Hygia theme (versions

EUVD-2026-96189

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

EUVD-2026-96192

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...

CVE-2026-93938

The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...

CVE-2026-93940

The ThemeREX Group Greeny WordPress theme (versions

CVE-2026-93941

The ThemeREX Group Edema WordPress theme is affected by a PHP Object Injection vulnerability (CWE-502) in versions up to and including 1.2.2.2 . The root cause is the deserialization of untrusted data , which allows an attacker to achieve object injection. This vulnerability has a CRITICAL base s...

CVE-2026-93936

The WordPress IPharm theme (versions

CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

CVE-2026-93934 WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13...

CVE-2026-93936 WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...

EUVD-2026-96193

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...

CVE-2026-93934

The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...

EUVD-2026-96194

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

EUVD-2026-96195

Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13...

CVE-2026-93935

The ThemeREX Group Let's Play WordPress theme (versions

CVE-2026-93932

The Smart Casa WordPress theme, developed by ThemeREX Group , is vulnerable to a PHP Object Injection flaw in versions 1.0.12 and below. This vulnerability stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary code or manipulate application logic. T...

CVE-2026-93933

The ThemeREX Group Rosalinda WordPress theme is vulnerable to PHP Object Injection in versions

CVE-2026-93930 WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0...