Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 29 Oct 2026 08:20:27 +0000 CVE-2026-107887 — Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme https://db.gcve.eu/vuln/cve-2026-107887 <p><strong>Affected:</strong> Unknown Advanced Twenty Seventeen</p> <p>The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site&#39;s active site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.</p> <p><strong>Affected:</strong> Unknown Advanced Twenty Seventeen</p> <p>The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site&#39;s active site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.</p> https://db.gcve.eu/vuln/cve-2026-107887