aThemeArt CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH aThemeArt CVE published 2026-10-16

CVE-2026-111413

A Cross-Site Request Forgery (CSRF) vulnerability exists in the aThemeArt Theme Helper plugin for WordPress versions up to and including 1.0.8. This issue allows attackers to perform unintended actions on behalf of users, potentially leading to security risks. The vulnerability has been publicly disclosed and has a CVSS score of 8.8, indicating a high severity level.