Advisories · Technology
darendev Simple Theme Changer.
Every CVE that names darendev Simple Theme Changer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update
- darendev Simple Theme Changer
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions
- darendev Simple Theme Changer
- Broken access control