Vulnerabilities
Critical Deserialization Flaw Found in Axiomthemes Veto Plugin Up to 1.6.0
The National Vulnerability Database rates CVE-2026-93927 as critical, warning that untrusted data deserialization allows object injection in Axiomthemes Veto.
Threat Times Exposure Desk
Vulnerabilities
Critical Deserialization Flaw Found in ThemeREX Rosalinda WordPress Theme
A CVSS 9.8 vulnerability in the Rosalinda theme allows object injection, affecting versions up to 1.2.4 according to the National Vulnerability Database.
Vulnerabilities
Critical Object Injection Vulnerability Found in Smart Casa Versions Up to 1.0.12
The National Vulnerability Database rates CVE-2026-93932 as critical with a CVSS score of 9.8, affecting ThemeREX Group’s Smart Casa software through version 1.0.12 due to unsafe data deserialization.
Vulnerabilities
ThemeREX Smash Plugin Faces Critical Deserialization Flaw in Versions Up to 1.12.0
The National Vulnerability Database lists CVE-2026-93931 as critical, exposing users of older Smash plugin versions to remote object injection risks.
Vulnerabilities
Critical Object Injection Flaw Found in ThemeREX Tantra CMS Versions Up to 2.9.0
The National Vulnerability Database rates CVE-2026-93930 as critical, citing untrusted data deserialization risks in the popular web platform.
Vulnerabilities
Critical Deserialization Flaw in ThemeREX IPharm Plugin Rated 9.8
A severe object injection vulnerability in the IPharm WordPress plugin affects versions up to 1.2.4, allowing attackers to execute arbitrary code on affected sites.
Vulnerabilities
Let's Play Plugin Critical Flaw CVE-2026-93935 Allows Object Injection
The National Vulnerability Database rates a deserialization flaw in ThemeREX Group's Let's Play plugin as critical, affecting versions through 1.1.15.
Vulnerabilities
Critical Object Injection Flaw Found in ThemeREX Partiso Theme
A CVSS 9.8 vulnerability in Partiso versions up to 1.1.13 allows untrusted data deserialization and object injection, posing a severe risk to affected sites.
Vulnerabilities
Critical Deserialization Flaw Found in ThemeREX Edema Plugin Versions Up to 1.2.2.2
A severe object injection vulnerability in ThemeREX Group Edema allows untrusted data deserialization, posing a high risk to affected installations.
Vulnerabilities
Critical Deserialization Flaw in ThemeREX Greeny Theme Rated 9.8 CVSS
A critical object injection vulnerability in the Greeny WordPress theme allows remote attackers to execute arbitrary code on affected sites through untrusted data.
Vulnerabilities
Critical object injection flaw found in ThemeREX Hogwords plugin
A CVSS 9.8 vulnerability in ThemeREX Hogwords allows untrusted data deserialization, affecting versions up to 1.2.7.
Vulnerabilities
Hygia Plugin Faces Critical Deserialization Flaw in Versions Through 1.21.0
The National Vulnerability Database rates the untrusted data deserialization issue in ThemeREX Hygia as critical with a CVSS score of 9.8.
Vulnerabilities
Critical Deserialization Flaw in Axiomthemes Balance Plugin Exposes Sites to Object Injection
The National Vulnerability Database rates CVE-2026-93945 as critical, affecting Axiomthemes Balance versions up to 1.12.0 through untrusted data deserialization.
Vulnerabilities
Critical Deserialization Flaw Found in ThemeREX Camelia Plugin Through Version 1.2.15
The National Vulnerability Database rates CVE-2026-93944 as critical, citing object injection risks in the popular WordPress theme framework.
Vulnerabilities
Critical Object Injection Flaw Found in ThemeREX Convex Plugin
The National Vulnerability Database lists a CVSS 9.8 critical deserialization issue in ThemeREX Convex versions up to 1.16.0.
Vulnerabilities
Critical CVE-2026-93942 Allows Object Injection in ThemeREX Dwell Up to Version 1.16.0
The National Vulnerability Database lists a critical deserialization flaw in ThemeREX Dwell, affecting versions through 1.16.0 with a CVSS score of 9.8.
Vulnerabilities
Critical CVE-2026-62046 Object Injection Flaw Found in ThemeREX Gutentype Plugin
A CVSS 9.8 critical vulnerability in ThemeREX Group Gutentype allows object injection via untrusted data deserialization in versions up to 2.1.12.
Vulnerabilities
Critical Object Injection Flaw Found in Booklovers WordPress Theme
The National Vulnerability Database rates CVE-2026-62045 as critical due to untrusted data deserialization risks in the Booklovers theme.
Vulnerabilities
Critical WordPress Plugin Flaw Allows Unauthenticated File Deletion and Remote Code Execution
A critical vulnerability in the PPOM WooCommerce plugin lets attackers delete server files, potentially enabling remote code execution in versions up to 34.0.10.
Vulnerabilities
Laptop Production Outside China to Drop to 21% in 2026 Amid Cost Concerns
TrendForce reports global PC makers are reversing supply chain shifts due to soaring component costs, reducing non-China output share.
Vulnerabilities
Firmus IPO Collapses After Investors Reject $30B Valuation Against $51M Revenue
US fund managers halted the Nvidia-backed firm's public offering within 48 hours, citing a valuation that vastly exceeded its projected annual revenue figures.
Vulnerabilities
Avada Builder Plugin Vulnerable to Critical Auth Bypass in Versions Up to 7.16.1
Unauthenticated attackers can trigger arbitrary WordPress action hooks via the Avada Builder plugin, risking permanent site content deletion and denial of service.
Vulnerabilities
Critical RCE Vulnerability Found in 3D Product Configurator for WooCommerce Plugin
Unauthenticated attackers can execute arbitrary code on WordPress sites using the vulnerable 3D Product Configurator plugin due to missing security checks.
Vulnerabilities
Critical Privilege Escalation Flaw Found in Blocksy Companion WordPress Plugin
Unauthenticated attackers can exploit CVE-2026-107645 to escalate privileges to seller accounts in vulnerable Blocksy Companion versions.