CVE-2026-93945 Axiomthemes CVE debrief

Who should care

Defenders responsible for WordPress installations, particularly those using the Balance theme, should assess exposure and prioritize remediation. This vulnerability has a high CVSS score, indicating a critical severity level. Defenders should verify the effectiveness of controls and monitoring to prevent potential exploitation.

Why it matters

CVE-2026-93945 is a critical vulnerability in the WordPress Balance theme, allowing for PHP Object Injection. Defenders should assess exposure, prioritize remediation, and verify controls to prevent potential exploitation and data breaches.

• Potential for code execution on vulnerable WordPress installations
• Possible data breaches or unauthorized access
• Required verification of theme versions and controls
• Need for timely remediation to prevent exploitation

Technical summary

The WordPress Balance theme, versions up to and including 1.12.0, is vulnerable to PHP Object Injection due to the deserialization of untrusted data. This issue has a CVSS score of 9.8, indicating a high severity level. The vulnerability affects the Balance theme, which is available on the WordPress plugin repository.

Defensive priority

High

Recommended defensive actions

• Assess exposure of WordPress Balance theme versions up to and including 1.12.0
• Prioritize remediation of vulnerable theme versions
• Verify the effectiveness of controls and monitoring

Evidence notes

The CVE record and source item provide details on the vulnerability, including its CVSS score and affected versions. However, additional information on exploitation, impact, and remediation is limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.