CVE-2026-42723 AncoraThemes CVE debrief

Who should care

Defenders responsible for WordPress installations with the CleanSkin theme should assess exposure and prioritize remediation.

Why it matters

CVE-2026-42723 is a critical vulnerability in CleanSkin theme versions <= 1.5.0, requiring defenders to assess exposure, prioritize remediation, and verify vulnerability status.

• Potential for unauthenticated code execution
• Possible impact on data confidentiality and integrity
• Requires verification of affected versions and remediation status

Technical summary

CVE-2026-42723 is an unauthenticated PHP object injection vulnerability in CleanSkin theme versions <= 1.5.0, with a CVSS score of 9.8 and CRITICAL severity.

Defensive priority

High

Recommended defensive actions

• Assess exposure of CleanSkin theme versions <= 1.5.0
• Prioritize remediation of vulnerable versions
• Verify vulnerability status and remediation with the vendor

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine affected versions, exploitation status, and remediation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.