562234 matches found
EUVD-2026-96185
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0...
CVE-2026-93938
The Hogwords theme by ThemeREX Group, specifically versions up to and including 1.2.7 , is vulnerable to a PHP Object Injection flaw. The root cause is the deserialization of untrusted data , which allows an attacker to inject objects into the application. This vulnerability carries a CRITICAL se...
CVE-2026-93940
The ThemeREX Group Greeny WordPress theme (versions
CVE-2026-93937
The WordPress Hygia theme (versions
CVE-2026-93941
The ThemeREX Group Edema WordPress theme is affected by a PHP Object Injection vulnerability (CWE-502) in versions up to and including 1.2.2.2 . The root cause is the deserialization of untrusted data , which allows an attacker to achieve object injection. This vulnerability has a CRITICAL base s...
EUVD-2026-96190
Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0...
EUVD-2026-96189
Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2...
EUVD-2026-96192
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0...
EUVD-2026-96191
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7...
CVE-2026-93935
The ThemeREX Group Let's Play WordPress theme (versions
CVE-2026-93934
The ThemeREX Group Partiso WordPress theme is vulnerable to a PHP Object Injection vulnerability in versions up to and including 1.1.13 . This issue stems from the deserialization of untrusted data , which can allow an attacker to inject objects into the application. The impact is rated as CRITIC...
CVE-2026-93936
The WordPress IPharm theme (versions
EUVD-2026-96194
Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15...
EUVD-2026-96195
Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13...
EUVD-2026-96193
Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4...
CVE-2026-93930
The WordPress Tantra theme (versions
CVE-2026-93932
The Smart Casa WordPress theme, developed by ThemeREX Group , is vulnerable to a PHP Object Injection flaw in versions 1.0.12 and below. This vulnerability stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary code or manipulate application logic. T...
CVE-2026-93931
The Smash theme by ThemeREX Group for WordPress is vulnerable to a PHP Object Injection vulnerability in versions