{"vulnerability": "cve-2026-93931", "sightings": [{"uuid": "e0dbc1db-7f0c-4186-8936-bcdca500cde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117415408309697738", "content": "CVE-2026-93931 WordPress Smash theme &lt;= 1.12.0 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93931https://patchstack.com/database/wordpress/theme/smash/vulnerability/wordpress-smash-theme-1-12-0-php-object-injection-vulnerability?_s_id=cve#ThemeREXGroup #Smash#CVE_2026_93931#bot", "creation_timestamp": "2026-10-10T07:22:28.673194Z"}, {"uuid": "303f26f9-596a-4101-9a40-f02a49849e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxizz2qxsj2n", "content": "CVE-2026-93931 - smash\nThe Smash theme for WordPress, versions up through 1.12.0, can be tricked into processing crafted data that leads to code execution on the server. This could allow an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#smash #themerexgroup #CVE #infosec", "creation_timestamp": "2026-10-10T08:10:05.553833Z"}, {"uuid": "9f276e7d-6b0c-4277-bb2b-6b2095a61686", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxjamhyqa22n", "content": "\ud83d\udea8 CVE-2026-93931 \u2014 CVSS 9.8 CRITICAL\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93931\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T10:08:19.643363Z"}, {"uuid": "9dfc442c-c8bd-42a0-8dfa-d11c115a35a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93931", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxk6fceqra2h", "content": "\ud83d\udd34 CVE-2026-93931 - Critical (9.8)\n\nDeserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injec...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93931/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T19:01:12.412443Z"}]}