← All advisories

Unrated severityNVD Advisory· Published Jun 26, 2026· Updated Jun 26, 2026

WordPress Child theme Wizard plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

CVE-2026-57655

Description

Unauthenticated Cross Site Request Forgery (CSRF) in Child Theme Wizard <= 1.4 versions.

Affected products

1

WordPress/Child Theme Wizardllm-create
Range: <=1.4

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/child-theme-wizard/vulnerability/wordpress-child-theme-wizard-plugin-1-4-cross-site-request-forgery-csrf-vulnerabilitymitrevdb-entry

News mentions

0

No linked articles in our index yet.