Description
WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
Remediation
References
Related Vulnerabilities
OpenSSL Out-of-bounds Read Vulnerability (CVE-2026-28386)
WordPress Plugin Modern Events Calendar Lite Security Bypass (5.1.6)
WordPress Plugin WP Coder-add custom html, css and js code Cross-Site Request Forgery (2.5.1)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2024-28593)
Mailman Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2016-6893)