CVE-2026-93938

CRITICAL NVD

CVSS Score 9.8

Severity CRITICAL

Published Oct 10, 2026

Vendor unknown

Description

Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.

References

https://patchstack.com/database/wordpress/theme/hogwords/vulnerability/wordpress-hogwords-theme-1-2-7-php-object-injection-vulnerability?_s_id=cve