{"vulnerability": "CVE-2026-93936", "sightings": [{"uuid": "e5919ce5-7b8b-42d5-9787-bbde79fff6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93936", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415421531519266", "content": "CVE-2026-93936 WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93936https://patchstack.com/database/wordpress/theme/ipharm/vulnerability/wordpress-ipharm-theme-1-2-4-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #IPharm#CVE_2026_93936#bot", "creation_timestamp": "2026-10-10T07:25:50.429990Z"}, {"uuid": "d2c8c8cb-4f3b-4f4d-aecc-9a0ad7d6595c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93936", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj3onr23m2r", "content": "CVE-2026-93936 - ipharm\nThe IPharm theme for WordPress (versions up to 1.2.4) can be tricked into processing unsafe information, which may let a malicious user execute code on your site. This could lead\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ipharm #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:40:03.893687Z"}, {"uuid": "05fa4619-3c1c-4a2b-8596-3f25a13e96c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93936", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjanp6vqc2x", "content": "\ud83d\udea8 CVE-2026-93936 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.Thi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93936\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:09:00.560967Z"}, {"uuid": "8183b0a4-7113-402e-b6ac-49fb516058bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93936", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk3ugwt6j2y", "content": "\ud83d\udd34 CVE-2026-93936 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Inj...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93936/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T18:15:58.361252Z"}, {"uuid": "cf4e5c34-042f-4450-b195-1d248c44d70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93936", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117420748044364241", "content": "ThemeREX IPharm ipharm \u22641.2.4 hit by CRITICAL deserialization vuln (CVE-2026-93936, CVSS 9.8) \ud83d\udee1\ufe0f Allows object injection & potential system compromise. No patch yet \u2014 restrict access, increase monitoring. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-themerex-group-ipharm-ipharm-allows-object-9d61996241f7bf9e #OffSeq #vuln #CVE202693936 #infosec", "creation_timestamp": "2026-10-11T06:00:26.654838Z"}]}