CRITICAL 9.8 CVE-2026-93943 Published 10 Oct 2026

ThemeREX Convex WordPress Theme Object Injection Vulnerability

Worried this affects your website?

A deserialization of untrusted data vulnerability has been found in ThemeREX Group Convex, a WordPress theme. It allows object injection.

The issue affects Convex from n/a through 1.16.0.