{"vulnerability": "CVE-2026-93944", "sightings": [{"uuid": "bb7f4853-5047-4e0b-bffc-1c6674bf1dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415440062371247", "content": "CVE-2026-93944 WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93944https://patchstack.com/database/wordpress/theme/camelia/vulnerability/wordpress-camelia-theme-1-2-15-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Camelia#CVE_2026_93944#bot", "creation_timestamp": "2026-10-10T07:30:33.128506Z"}, {"uuid": "0ec9d202-6516-4eac-91e4-b86c3f1d08d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxj5wadcdk2z", "content": "CVE-2026-93944 - camelia\nThe Camelia theme up to version 1.2.15 can accept crafted data that leads to unwanted code running on your site. An attacker could use this to take control of the WordPress\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#camelia #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T09:20:05.728437Z"}, {"uuid": "d2e36c00-911a-44e1-bdbe-29d63898b869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjapf6qve2q", "content": "\ud83d\udea8 CVE-2026-93944 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.T...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93944\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:09:57.157336Z"}, {"uuid": "b7a6470f-427a-4f61-ba02-b000b82175f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93944", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxjlvvptkd2w", "content": "ThemeREX Camelia (<=1.2.15) faces a CRITICAL deserialization flaw \u2014 remote attackers can fully compromise systems. Patch status unknown: restrict access & check vendor updates now. https://radar.offseq.com/threat/cve-2026-93944-deserialization-of-untrusted-data-in-themerex-group-camelia-9f283474b...", "creation_timestamp": "2026-10-10T13:30:27.641265Z"}, {"uuid": "496bde7d-20f6-48a4-a265-88bf5dcc7fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93944", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117416855139300181", "content": "CVE-2026-93944: CRITICAL deserialization vuln in ThemeREX Camelia (<=1.2.15). Allows remote object injection & full system compromise. No patch yet \u2014 limit exposure, monitor vendor. \ud83d\udd0e https://radar.offseq.com/threat/cve-2026-93944-deserialization-of-untrusted-data-in-themerex-group-camelia-9f283474b74167fd #OffSeq #Infosec #Vulnerability", "creation_timestamp": "2026-10-10T13:30:31.243029Z"}, {"uuid": "c4e6d16c-54c2-4f00-a6c8-10cd6ecba45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93944", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk5klcgub24", "content": "\ud83d\udd34 CVE-2026-93944 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93944/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T18:46:15.283117Z"}]}