Vulnerabilities
WineShop PHP Object Injection in v3.20 Lets Attackers Inject Code Without Auth
A critical vulnerability in WineShop versions up to 3.20 allows unauthenticated attackers to inject PHP objects, posing a severe risk to e-commerce sites.
ThemeREX
Everything SecOps Signal has reported about ThemeREX: 6 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Partiso Theme Deserialization Flaw: CVSS 9.8 Threat for Versions Up to 1.1.13
Sites running ThemeREX Partiso versions up to 1.1.13 face a CVSS 9.8 risk from untrusted data deserialization attacks.
Vulnerabilities
Greeny WordPress Theme Deserialization Flaw CVE-2026-93940 Puts V2.10.0 Sites at Critical Risk
A critical object injection vulnerability in the Greeny WordPress theme affects versions through 2.10.0, posing severe risks to unpatched sites.
Vulnerabilities
Hogwords Deserialization Flaw: CVSS 9.8 CVE-2026-93938 Affects Versions Up to 1.2.7
A CVSS 9.8 deserialization flaw in Hogwords versions up to 1.2.7 allows object injection, exposing sites to severe remote compromise risks.
Vulnerabilities
Gutentype Plugin Deserialization CVE-2026-62046 Scores 9.8 CVSS Through v2.1.12
The National Vulnerability Database rates CVE-2026-62046 as critical, affecting all Gutentype plugin versions up to 2.1.12 with untrusted data deserialization risks.
Vulnerabilities
ThemeREX Tantra CMS Deserialization Bug Exposes Businesses to Critical CVE-2026-93930 Risks
A critical deserialization vulnerability in ThemeREX Tantra CMS versions up to 2.9.0 allows object injection, posing severe risks to business operations.