Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #11

Critical flaw found in ThemeREX Smart Casa plugin

Original: 🔴 CVE-2026-93932 - Critical (9.8) Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-cas

A critical vulnerability, CVE-2026-93932, has been disclosed in the ThemeREX Group Smart Casa WordPress plugin. The deserialization flaw, scored 9.8, allows object injection through untrusted data and affects all versions up to and including 1.0.12. Security teams are urging anyone running the plugin to update or disable it immediately, as such flaws can enable full remote code execution.

Why now: A newly published critical vulnerability with a maximum severity score is being flagged to site administrators who may be running the affected plugin.

ThemeREX GroupSmart CasaCVE-2026-93932

Open on mastodon →

Evidence

• 🔴 CVE-2026-93932 - Critical (9.8) Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12. 🔗 https://www. thehackerwire.com/vulnerabilit y/CVE-2026-93932/ # CVE #… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/1770490