← Database

CVE-2026-39640

CRITICAL CVSS: 9.6 Published: 2026-04-08 Modified: 2026-07-24

Description

Cross-Site Request Forgery (CSRF) vulnerability in mndpsingh287 Theme Editor theme-editor allows Code Injection.This issue affects Theme Editor: from n/a through <= 3.2.

Affected Platforms

Unknown

Weakness Type

CWE-352

References