Skip to content
OpenAdvisories

Vendor

steve-forster

1 known vulnerabilities.

Products

Theme Importer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10312

    Theme Importer <= 1.0 - Cross-Site Request Forgery

    The Theme Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing nonce validation when processing form submissions in the theme-importer.php file. This makes it possible for …

    steve-forster Theme Importer Web / CMS