CVE-2026-93938

The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...

EUVD-2026-96191

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hogwords versions = 1.2.7...

WordPress Hogwords Theme <= 1.2.6 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hogwords versions = 1.2.6...

WordPress Hogwords Theme <= 1.2.6 is vulnerable to Local File Inclusion

Software Hogwords Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID ee13435740c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...