darendev

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

darendev records in CISA KEV

No darendev vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-13146 CVE-2025-14392 · GHSA-877p-9476-9gcg

Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions

LOW 19

The Simple Theme Changer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the user_theme_admin, display_method_admin, and set_change_theme_button_name actions a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2025-12-12 No fix listed CWE-862

TI-2025-13145 CVE-2025-14391 · GHSA-4v5r-686x-5pph

Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update

LOW 19

The Simple Theme Changer plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00124 Published 2025-12-12 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0