CVE-2026-93942: WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability
Published Oct 10, 2026
·Updated
Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0.
Affected Software
1 affected component
ThemeREX Group Dwell<=1.16.0
Event History
Oct 10, 2026
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates the issue is remotely exploitable over the network with no privileges required and no user interaction.
2
What is the potential impact if exploited?
The CVSS vector rates confidentiality, integrity, and availability impact as high, indicating that successful exploitation could severely affect all three.