Description
Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jay Versluis | Child Theme Wizard | ≤ 1.4 | — |
High · 8.2
CVE-2026-57655
EUVD-2026-39770GHSA-rfg3-55h8-446c
WordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack