CVE-2026-57655

Name of the Vulnerable Software and Affected Versions Child Theme Wizard versions 1.4 and earlier

Description An unauthenticated Cross Site Request Forgery (CSRF) exists, which allows attackers to force users to execute unwanted actions. CSRF is a type of attack that tricks a victim into submitting a malicious request. It occurs when a web application does not properly verify that the request was intentionally initiated by the user.

Recommendations Update to a version newer than 1.4.