CVE-2026-93936: WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates the issue is exploitable over the network with low attack complexity. It requires no privileges and no user interaction.

Q: Which installations should be considered affected?

IPharm versions through 1.2.4 are affected. The affected version range has no stated lower bound, so installations using an earlier IPharm version should also be treated as potentially affected.

Q: What could successful exploitation affect?

The published CVSS metrics rate confidentiality, integrity, and availability impact as high. Successful exploitation could therefore have severe effects across all three security properties.

Published Oct 10, 2026

Updated

Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.

Affected Software

1 affected component

ThemeREX Group IPharm<=1.2.4

Event History

Oct 10, 2026

CVE Published

via MITRE·07:00 AM

Data Sourced

via MITRE·07:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates the issue is exploitable over the network with low attack complexity. It requires no privileges and no user interaction.

Which installations should be considered affected?

IPharm versions through 1.2.4 are affected. The affected version range has no stated lower bound, so installations using an earlier IPharm version should also be treated as potentially affected.

What could successful exploitation affect?

The published CVSS metrics rate confidentiality, integrity, and availability impact as high. Successful exploitation could therefore have severe effects across all three security properties.

CVE-2026-93936: WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations should be considered affected?

What could successful exploitation affect?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which installations should be considered affected?

What could successful exploitation affect?