CVE-2026-93938

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93938

The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...

EUVD-2026-96191

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93938 WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

PT-2026-109583

Name of the Vulnerable Software and Affected Versions Hogwords versions prior to 1.2.8 Description Deserialization of untrusted data in the Hogwords theme allows for Object Injection. This occurs when the application deserializes data from an untrusted source without sufficient validation,...

CVE-2026-93938: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Hogwords versions = 1.2.7...

WordPress Hogwords Theme <= 1.2.6 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Hogwords versions = 1.2.6...

WordPress Hogwords Theme <= 1.2.6 is vulnerable to Local File Inclusion

Software Hogwords Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID ee13435740c8 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity...