High · 7.1 CVE-2025-52792 EUVD-2025-28467GHSA-jfgc-3h88-627p

WordPress WP User Stylesheet Switcher plugin <= v2.2.0 - Cross Site Request Forgery (CSRF) Vulnerability

Published Jun 20, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Vendor: vgstef Product: WP User Stylesheet Switcher

Description

Cross-Site Request Forgery (CSRF) vulnerability in vgstef WP User Stylesheet Switcher wp-user-stylesheet-switcher allows Stored XSS.This issue affects WP User Stylesheet Switcher: from n/a through <= v2.2.0.

Affected products

Vendor	Product	Affected	Fixed
vgstef	WP User Stylesheet Switcher	≤ v2.2.0	—

References

https://patchstack.com/database/Wordpress/Plugin/wp-user-stylesheet-switcher/vulnerability/wordpress-wp-user-stylesheet-switcher-plugin-v2-2-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry