CVE-2026-93938: WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates it is remotely exploitable over the network with low attack complexity, requires no privileges, and requires no user interaction. An unauthenticated remote attacker could therefore be able to target an affected installation.
Which installations are affected?
Hogwords versions through 1.2.7 are affected. The available data does not identify a fixed version or provide configuration-specific exposure conditions.
What is the potential impact?
The issue is rated critical with a 9.8 CVSS score and has high confidentiality, integrity, and availability impact. Successful exploitation could affect data confidentiality, alter data or system behavior, and disrupt availability.