Unrated
Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme
Type: advisorySource: Official CVE List
The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscr…
Products: Advanced Twenty SeventeenCVEs: CVE-2026-107887