CVE-2026-81797: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme = 1.0.2 versions...

CVE-2026-93930: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0...

CVE-2026-93931: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0...

CVE-2026-93932: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12...

CVE-2026-93933: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4...

CVE-2026-93934: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13...

CVE-2026-93940: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0...

CVE-2026-93935: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...

CVE-2026-93945: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...

CVE-2026-93944: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...

CVE-2026-93943: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0...

CVE-2026-93941: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...

CVE-2026-93938: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...

CVE-2026-93937: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...

PT-2026-109587

Name of the Vulnerable Software and Affected Versions Convex versions prior to 1.16.1 Description ThemeREX Group Convex is subject to a deserialization of untrusted data issue that allows PHP Object Injection. This occurs when the application deserializes data from an untrusted source without...

CVE-2026-66567: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Anesta = 1.5.3 versions...

PT-2026-109572

Name of the Vulnerable Software and Affected Versions Gutentype versions prior to 2.1.13 Description Deserialization of untrusted data in the Gutentype plugin allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application to execute arbitrary cod...

PT-2026-109581

Name of the Vulnerable Software and Affected Versions IPharm versions prior to 1.2.5 Description ThemeREX Group IPharm ipharm contains a deserialization of untrusted data flaw that allows Object Injection. Object Injection occurs when untrusted data is used to abuse the logic of an application by...

PT-2026-109588

Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15...

PT-2026-109589

Name of the Vulnerable Software and Affected Versions Axiomthemes Balance versions prior to 1.12.1 Description The Axiomthemes Balance WordPress theme contains a flaw where it deserializes untrusted user-controlled data using the unserialize function. This allows for PHP object injection, where...