https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 09:56:25 +0000 https://vulnerability.circl.lu/sighting/fadb41f1-d495-4452-a357-c9e20367f0b0/export {"uuid": "fadb41f1-d495-4452-a357-c9e20367f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxku5f5znw2w", "content": "CVE-2026-93935: CRITICAL deserialization bug in ThemeREX Let's Play playhockey \u22641.1.15 allows remote object injection with no user action. Restrict plugin use & check for vendor updates. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-pl...", "creation_timestamp": "2026-10-11T01:30:28.659302Z"} {"uuid": "fadb41f1-d495-4452-a357-c9e20367f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxku5f5znw2w", "content": "CVE-2026-93935: CRITICAL deserialization bug in ThemeREX Let's Play playhockey \u22641.1.15 allows remote object injection with no user action. Restrict plugin use & check for vendor updates. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-pl...", "creation_timestamp": "2026-10-11T01:30:28.659302Z"} https://vulnerability.circl.lu/sighting/fadb41f1-d495-4452-a357-c9e20367f0b0/export Sun, 11 Oct 2026 01:30:28 +0000 https://vulnerability.circl.lu/sighting/18575211-d41a-4b07-baf3-8026ae31401d/export {"uuid": "18575211-d41a-4b07-baf3-8026ae31401d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419686343004192", "content": "CVE-2026-93935: ThemeREX Let's Play playhockey \u22641.1.15 affected by CRITICAL deserialization flaw (CWE-502). Enables remote object injection and full compromise. Patch pending \u2014 monitor vendor updates & restrict plugin use. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-playhockey-allows-object-6b9f9ae91683af07 #OffSeq #CVE202693935 #WordPress #Infosec", "creation_timestamp": "2026-10-11T01:30:26.422621Z"} {"uuid": "18575211-d41a-4b07-baf3-8026ae31401d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419686343004192", "content": "CVE-2026-93935: ThemeREX Let's Play playhockey \u22641.1.15 affected by CRITICAL deserialization flaw (CWE-502). Enables remote object injection and full compromise. Patch pending \u2014 monitor vendor updates & restrict plugin use. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-playhockey-allows-object-6b9f9ae91683af07 #OffSeq #CVE202693935 #WordPress #Infosec", "creation_timestamp": "2026-10-11T01:30:26.422621Z"} https://vulnerability.circl.lu/sighting/18575211-d41a-4b07-baf3-8026ae31401d/export Sun, 11 Oct 2026 01:30:26 +0000 https://vulnerability.circl.lu/sighting/0b929729-9dd0-4396-81cc-5728c72e4f66/export {"uuid": "0b929729-9dd0-4396-81cc-5728c72e4f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkaw5xsve2g", "content": "\ud83d\udd34 CVE-2026-93935 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Ob...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:46:25.253151Z"} {"uuid": "0b929729-9dd0-4396-81cc-5728c72e4f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkaw5xsve2g", "content": "\ud83d\udd34 CVE-2026-93935 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Ob...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:46:25.253151Z"} https://vulnerability.circl.lu/sighting/0b929729-9dd0-4396-81cc-5728c72e4f66/export Sat, 10 Oct 2026 19:46:25 +0000 https://vulnerability.circl.lu/sighting/f349b0c7-246a-48eb-8539-3d74dadcfd2f/export {"uuid": "f349b0c7-246a-48eb-8539-3d74dadcfd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanh3ich2z", "content": "\ud83d\udea8 CVE-2026-93935 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93935\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:51.954918Z"} {"uuid": "f349b0c7-246a-48eb-8539-3d74dadcfd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanh3ich2z", "content": "\ud83d\udea8 CVE-2026-93935 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93935\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:51.954918Z"} https://vulnerability.circl.lu/sighting/f349b0c7-246a-48eb-8539-3d74dadcfd2f/export Sat, 10 Oct 2026 10:08:51 +0000 https://vulnerability.circl.lu/sighting/9a2260e5-1b9e-42e0-a203-9c85db8ddee0/export {"uuid": "9a2260e5-1b9e-42e0-a203-9c85db8ddee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj34to2qx2n", "content": "CVE-2026-93935 - let's play\nThe Let\u2019s Play theme for WordPress (versions up to 1.1.15) can be tricked into processing crafted data, which may let an attacker execute code on your site. This could let a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:30:06.141508Z"} {"uuid": "9a2260e5-1b9e-42e0-a203-9c85db8ddee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj34to2qx2n", "content": "CVE-2026-93935 - let's play\nThe Let\u2019s Play theme for WordPress (versions up to 1.1.15) can be tricked into processing crafted data, which may let an attacker execute code on your site. This could let a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:30:06.141508Z"} https://vulnerability.circl.lu/sighting/9a2260e5-1b9e-42e0-a203-9c85db8ddee0/export Sat, 10 Oct 2026 08:30:06 +0000 https://vulnerability.circl.lu/sighting/7483fa75-007c-4362-9fd1-f902614a5d4c/export {"uuid": "7483fa75-007c-4362-9fd1-f902614a5d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415418889794597", "content": "CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93935https://patchstack.com/database/wordpress/theme/playhockey/vulnerability/wordpress-let-s-play-theme-1-1-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Let'sPlay#CVE_2026_93935#bot", "creation_timestamp": "2026-10-10T07:25:10.020070Z"} {"uuid": "7483fa75-007c-4362-9fd1-f902614a5d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415418889794597", "content": "CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93935https://patchstack.com/database/wordpress/theme/playhockey/vulnerability/wordpress-let-s-play-theme-1-1-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Let'sPlay#CVE_2026_93935#bot", "creation_timestamp": "2026-10-10T07:25:10.020070Z"} https://vulnerability.circl.lu/sighting/7483fa75-007c-4362-9fd1-f902614a5d4c/export Sat, 10 Oct 2026 07:25:10 +0000