WordPress

Everything NetSec Tribune has reported about WordPress: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

WordPress Convex Plugin v1.16.0 Faces Critical CVE-2026-93943 Deserialization Risk

The National Vulnerability Database rates CVE-2026-93943 as critical, exposing WordPress sites using the Convex plugin to remote object injection risks.

Oct 11, 2026

Vulnerabilities

NVD Logs Critical CVE-2026-93933 in ThemeREX Rosalinda 1.2.4 for Object Injection

NVD records a critical deserialization flaw in ThemeREX Rosalinda versions up to 1.2.4, exposing sites to object injection attacks.

Oct 10, 2026