https://vulnerability.circl.lu/sightings/feed 2026-10-11T03:29:54.845921+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fadb41f1-d495-4452-a357-c9e20367f0b0/export 2026-10-11T03:29:54.881368+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fadb41f1-d495-4452-a357-c9e20367f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxku5f5znw2w", "content": "CVE-2026-93935: CRITICAL deserialization bug in ThemeREX Let's Play playhockey \u22641.1.15 allows remote object injection with no user action. Restrict plugin use & check for vendor updates. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-pl...", "creation_timestamp": "2026-10-11T01:30:28.659302Z"} 2026-10-11T01:30:28.659302+00:00 https://vulnerability.circl.lu/sighting/18575211-d41a-4b07-baf3-8026ae31401d/export 2026-10-11T03:29:54.883666+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "18575211-d41a-4b07-baf3-8026ae31401d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419686343004192", "content": "CVE-2026-93935: ThemeREX Let's Play playhockey \u22641.1.15 affected by CRITICAL deserialization flaw (CWE-502). Enables remote object injection and full compromise. Patch pending \u2014 monitor vendor updates & restrict plugin use. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-playhockey-allows-object-6b9f9ae91683af07 #OffSeq #CVE202693935 #WordPress #Infosec", "creation_timestamp": "2026-10-11T01:30:26.422621Z"} 2026-10-11T01:30:26.422621+00:00 https://vulnerability.circl.lu/sighting/0b929729-9dd0-4396-81cc-5728c72e4f66/export 2026-10-11T03:29:54.883811+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0b929729-9dd0-4396-81cc-5728c72e4f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkaw5xsve2g", "content": "\ud83d\udd34 CVE-2026-93935 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Ob...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:46:25.253151Z"} 2026-10-10T19:46:25.253151+00:00 https://vulnerability.circl.lu/sighting/f349b0c7-246a-48eb-8539-3d74dadcfd2f/export 2026-10-11T03:29:54.883921+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f349b0c7-246a-48eb-8539-3d74dadcfd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanh3ich2z", "content": "\ud83d\udea8 CVE-2026-93935 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93935\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:51.954918Z"} 2026-10-10T10:08:51.954918+00:00 https://vulnerability.circl.lu/sighting/9a2260e5-1b9e-42e0-a203-9c85db8ddee0/export 2026-10-11T03:29:54.884019+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a2260e5-1b9e-42e0-a203-9c85db8ddee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj34to2qx2n", "content": "CVE-2026-93935 - let's play\nThe Let\u2019s Play theme for WordPress (versions up to 1.1.15) can be tricked into processing crafted data, which may let an attacker execute code on your site. This could let a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:30:06.141508Z"} 2026-10-10T08:30:06.141508+00:00 https://vulnerability.circl.lu/sighting/7483fa75-007c-4362-9fd1-f902614a5d4c/export 2026-10-11T03:29:54.884124+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7483fa75-007c-4362-9fd1-f902614a5d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415418889794597", "content": "CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93935https://patchstack.com/database/wordpress/theme/playhockey/vulnerability/wordpress-let-s-play-theme-1-1-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Let'sPlay#CVE_2026_93935#bot", "creation_timestamp": "2026-10-10T07:25:10.020070Z"} 2026-10-10T07:25:10.020070+00:00