darendev

Products

ProductCVEsExploitedLatest
Simple Theme Changer2–Dec 12, 2025

Exploited and recent CVEs

  • CVE-2025-14391 Medium 4.3 Simple Theme Changer <= 1.0 - Cross-Site Request Forgery to Arbitrary Theme Switcher Configuration Update 0.1%
  • CVE-2025-14392 Medium 4.3 Simple Theme Changer <= 1.0. - Missing Authorization to Plugin Settings Update via AJAX Actions 0.2%