CVE-2026-93940

Deferred Deferred - Pending Action

Deserialization of Untrusted Data in Greeny Theme

Publication date: 2026-10-10

Last updated on: 2026-10-13

Assigner: Patchstack

Description

Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-10

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-10

EPSS Evaluated

2026-10-18

NVD

CVE-2026-93940

EUVD

EUVD-2026-96190

Affected Vendors & Products

Vendor	Product	Version / Range
ThemeREX	Group	Greeny 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

This vulnerability is a Deserialization of Untrusted Data flaw in the ThemeREX Group Greeny WordPress theme, specifically versions 2.10.0 and below. It allows Object Injection, which means attackers can manipulate data processing on the server by injecting malicious objects during deserialization. This can lead to remote code execution or other harmful actions.

Detection Guidance

Check if your WordPress site uses the Greeny theme version 2.10.0 or below. Look for unusual server behavior or unexpected data processing. Patchstack offers automated mitigation tools to detect exploitation attempts.

Impact Analysis

This vulnerability can allow unauthenticated attackers to execute harmful actions on your website, such as taking control of the site, stealing data, or installing malware. It is being actively exploited in mass campaigns targeting thousands of websites, regardless of size or popularity.

Compliance Impact

This vulnerability could lead to unauthorized data access or manipulation, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Unpatched systems risk exposing sensitive data, triggering compliance breaches and legal penalties.

Mitigation Strategies

Apply Patchstack's mitigation rule immediately to block attacks. Update the Greeny theme if an official patch is released. Contact your hosting provider or developer for assistance if needed.

Hi! I’m here to help you understand CVE-2026-93940. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70