Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: darendev Clear all filters
TI-2025-13146 CVE-2025-14392 · GHSA-877p-9476-9gcg

Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions

Priority LOW 19

The Simple Theme Changer plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the user_theme_admin, display_method_admin, and set_change_theme_button_name actions a…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2025-12-12 No fix listed CWE-862