What’s Vulnerable › Products

darendev Simple Theme Changer vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your darendev Simple Theme Changer version is affected

Latest darendev Simple Theme Changer vulnerabilities

• CVE-2025-14392 — Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions (CVSS 4.3)
• CVE-2025-14391 — Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update (CVSS 4.3)