<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T00:59:08.300268+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9e1d4d02-3c5c-4778-a977-95097a9066c4/export</id>
    <title>9e1d4d02-3c5c-4778-a977-95097a9066c4</title>
    <updated>2026-10-11T00:59:08.318105+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9e1d4d02-3c5c-4778-a977-95097a9066c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93937", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk3unaji72b", "content": "\ud83d\udd34 CVE-2026-93937 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93937/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T18:16:05.829991Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9e1d4d02-3c5c-4778-a977-95097a9066c4/export"/>
    <published>2026-10-10T18:16:05.829991+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/696f40b1-d56c-415f-88fa-62f23bc445d3/export</id>
    <title>696f40b1-d56c-415f-88fa-62f23bc445d3</title>
    <updated>2026-10-11T00:59:08.320607+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "696f40b1-d56c-415f-88fa-62f23bc445d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93937", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanwz5cq2z", "content": "\ud83d\udea8 CVE-2026-93937 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93937\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:09:08.694724Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/696f40b1-d56c-415f-88fa-62f23bc445d3/export"/>
    <published>2026-10-10T10:09:08.694724+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e0c32e8c-e94a-4b44-9c8a-43a64626e410/export</id>
    <title>e0c32e8c-e94a-4b44-9c8a-43a64626e410</title>
    <updated>2026-10-11T00:59:08.320698+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e0c32e8c-e94a-4b44-9c8a-43a64626e410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93937", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj3opa2ao27", "content": "CVE-2026-93937 - hygia\nThe Hygia theme for WordPress (versions up to 1.21.0) can be fooled into processing crafted data, which may let an attacker execute arbitrary commands on your site. This could lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#hygia #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:40:05.446577Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e0c32e8c-e94a-4b44-9c8a-43a64626e410/export"/>
    <published>2026-10-10T08:40:05.446577+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9f0f9cc1-8d33-4ec6-aa71-1f880ea9e932/export</id>
    <title>9f0f9cc1-8d33-4ec6-aa71-1f880ea9e932</title>
    <updated>2026-10-11T00:59:08.320770+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9f0f9cc1-8d33-4ec6-aa71-1f880ea9e932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93937", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415424175569084", "content": "CVE-2026-93937 WordPress Hygia theme &amp;lt;= 1.21.0 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93937https://patchstack.com/database/wordpress/theme/hygia/vulnerability/wordpress-hygia-theme-1-21-0-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Hygia#CVE_2026_93937#bot", "creation_timestamp": "2026-10-10T07:26:30.718999Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9f0f9cc1-8d33-4ec6-aa71-1f880ea9e932/export"/>
    <published>2026-10-10T07:26:30.718999+00:00</published>
  </entry>
</feed>
