{"id":"CVE-2026-111413","published":"2026-10-16T14:17:23.710","lastModified":"2026-10-16T15:19:36.177","description":"Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-352"],"vendors":[],"products":[],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/athemeart-theme-helper/vulnerability/wordpress-athemeart-theme-helper-plugin-1-0-8-cross-site-request-forgery-csrf-vulnerability?_s_id=cve","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A Cross-Site Request Forgery vulnerability allows attackers to perform unauthorized actions on behalf of users who visit malicious websites. This is particularly dangerous because it can lead to complete compromise of user accounts and administrative functions.","exploitability":"Exploitation is relatively straightforward requiring only a user to visit a malicious website with a crafted request, though it may require social engineering to get the user to interact with the attacker's site.","blast_radius":"The impact could be significant as attackers could perform high-privilege actions like changing admin settings, modifying content, or even gaining full administrative control over affected WordPress sites.","remediation":"Upgrade to version 1.0.9 or later to address this CSRF vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["csrf","wordpress","web"],"model":"garnet-coder","analyzedAt":"2026-10-18T16:01:43.381Z"}}