
Upwind Security MDR@UpwindMDR
🚨Critical - Axiomthemes Balance WP Theme PHP Object Injection via Unsafe Deserialization (CVE-2026-93945) Axiomthemes Balance WordPress theme deserializes untrusted user-controlled data (unserialize()), enabling PHP object injection. Remote attackers can craft serialized payloads to trigger gadget chains for RCE/file write or full site takeover, impacting CIA. 👉Affected: Axiomthemes Balance (WordPress theme) <= 1.12.0
0000032
315 followersView on X
