Live › vulnerability › CVE-2026-111413
Go to dashboardThe aThemeArt Theme Helper WordPress plugin, versions through 1.0.8, has a cross-site request forgery flaw. A logged-in site admin who opens an attacker's page can have a state-changing request sent on their behalf.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check the installed version of athemeart-theme-helper in the WordPress plugins screen or wp-content/plugins/athemeart-theme-helper; unknown whether any other check is needed.
Update athemeart-theme-helper to a version later than 1.0.8; no patched version is named in the sources, so check the plugin page for the current release.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.
This page as .md · .json · in your agent: get_signal("CVE-2026-111413")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.