Vulnerabilities
ThemeREX IPharm Deserialization Flaw Exposes Sites to Object Injection
A critical vulnerability in ThemeREX IPharm versions up to 1.2.4 allows untrusted data deserialization, posing a severe risk to WordPress installations.
Deserialization
Everything Phish Herald has reported about Deserialization: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Orgs hit by CVSS 9.8: Patch ThemeREX Tantra CMS to block object injection
Security teams must patch ThemeREX Tantra CMS versions up to 2.9.0 immediately to mitigate a critical deserialization vulnerability.
Vulnerabilities
Organisations Hit by Greeny CVE-2026-93940 Must Patch Critical Object Injection Vulnerability Now
A CVSS 9.8 vulnerability in ThemeREX Group Greeny versions up to 2.10.0 allows untrusted data deserialization, requiring immediate inventory checks.