{"vulnerability": "CVE-2026-93935", "sightings": [{"uuid": "7483fa75-007c-4362-9fd1-f902614a5d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415418889794597", "content": "CVE-2026-93935 WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93935https://patchstack.com/database/wordpress/theme/playhockey/vulnerability/wordpress-let-s-play-theme-1-1-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Let'sPlay#CVE_2026_93935#bot", "creation_timestamp": "2026-10-10T07:25:10.020070Z"}, {"uuid": "9a2260e5-1b9e-42e0-a203-9c85db8ddee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj34to2qx2n", "content": "CVE-2026-93935 - let's play\nThe Let\u2019s Play theme for WordPress (versions up to 1.1.15) can be tricked into processing crafted data, which may let an attacker execute code on your site. This could let a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:30:06.141508Z"}, {"uuid": "f349b0c7-246a-48eb-8539-3d74dadcfd2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanh3ich2z", "content": "\ud83d\udea8 CVE-2026-93935 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93935\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:51.954918Z"}, {"uuid": "0b929729-9dd0-4396-81cc-5728c72e4f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxkaw5xsve2g", "content": "\ud83d\udd34 CVE-2026-93935 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Ob...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93935/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:46:25.253151Z"}, {"uuid": "18575211-d41a-4b07-baf3-8026ae31401d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117419686343004192", "content": "CVE-2026-93935: ThemeREX Let's Play playhockey \u22641.1.15 affected by CRITICAL deserialization flaw (CWE-502). Enables remote object injection and full compromise. Patch pending \u2014 monitor vendor updates & restrict plugin use. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-playhockey-allows-object-6b9f9ae91683af07 #OffSeq #CVE202693935 #WordPress #Infosec", "creation_timestamp": "2026-10-11T01:30:26.422621Z"}, {"uuid": "fadb41f1-d495-4452-a357-c9e20367f0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93935", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxku5f5znw2w", "content": "CVE-2026-93935: CRITICAL deserialization bug in ThemeREX Let's Play playhockey \u22641.1.15 allows remote object injection with no user action. Restrict plugin use & check for vendor updates. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-lets-play-pl...", "creation_timestamp": "2026-10-11T01:30:28.659302Z"}]}