CWE-502

Everything BitShield News has reported about CWE-502: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

9.8 Critical: ThemeREX Stargaze v1.10 Has Unauthenticated PHP Object Injection CVE-2026-62051

ThemeREX Stargaze versions up to 1.10 contain a critical CVE-2026-62051 flaw allowing unauthenticated PHP object injection, posing immediate risks to managed sites.

Oct 11, 2026

Vulnerabilities

9.8 CVSS Score Logged for ThemeREX Rosalinda Deserialization Vulnerability

The National Vulnerability Database rates CVE-2026-93933 as critical, exposing sites running ThemeREX Rosalinda versions up to 1.2.4 to object injection risks.

Oct 10, 2026