{"schema_version":"2","view":"grouped","data":[{"id":56304,"cve_ids":["CVE-2026-107887"],"payload":{"kind":"advisory","title":"Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme","summary":"The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.","evidence":"cve:CVE-2026-107887","products":[{"name":{"value":"Advanced Twenty Seventeen","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-107887","aliases":["CVE-2026-107887"],"metrics":[],"affected":[{"vendor":"Unknown","product":"Advanced Twenty Seventeen","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"1.3.1"}],"defaultStatus":"unknown"}],"modified":"2026-10-24T14:36:55.557Z","provider":"cve","references":["https://wpscan.com/vulnerability/e252c7ee-368d-4bfb-a964-06804747c162/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-107887","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:35:42.694961Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:36:55.557Z"}}],"cna":{"orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan","dateUpdated":"2026-10-24T06:00:17.576Z"}}},"related_cves":[{"value":"CVE-2026-107887","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf37b52f-f500-480d-989e-769e8df525df","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-107887","advisory_id":"bf37b52f-f500-480d-989e-769e8df525df","event_types":["advisory"],"published_at":"2026-10-25T16:12:37.509905+00:00","technologies":["advanced-twenty-seventeen","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T06:00:17.576+00:00","detail_url":"/advisories/advisory%3Abf37b52f-f500-480d-989e-769e8df525df","group":{"id":"advisory:bf37b52f-f500-480d-989e-769e8df525df","revision":1,"primary_event_id":55827,"change":"published","superseded_by":[],"changed":{"id":55827,"cve_ids":["CVE-2026-107887"],"payload":{"kind":"advisory","title":"Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme","summary":"The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.","evidence":"cve:CVE-2026-107887","products":[{"name":{"value":"Advanced Twenty Seventeen","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-107887","aliases":["CVE-2026-107887"],"metrics":[],"affected":[{"vendor":"Unknown","product":"Advanced Twenty Seventeen","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"1.3.1"}],"defaultStatus":"unknown"}],"modified":"2026-10-24T14:36:55.557Z","provider":"cve","references":["https://wpscan.com/vulnerability/e252c7ee-368d-4bfb-a964-06804747c162/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-107887","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:35:42.694961Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:36:55.557Z"}}],"cna":{"orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan","dateUpdated":"2026-10-24T06:00:17.576Z"}}},"related_cves":[{"value":"CVE-2026-107887","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf37b52f-f500-480d-989e-769e8df525df","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-107887","advisory_id":"bf37b52f-f500-480d-989e-769e8df525df","event_types":["advisory"],"published_at":"2026-10-25T16:12:37.509905+00:00","technologies":["advanced-twenty-seventeen","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T06:00:17.576+00:00","detail_url":"/events/55827"},"members":[{"id":55827,"cve_ids":["CVE-2026-107887"],"payload":{"kind":"advisory","title":"Advanced Twenty Seventeen <= 1.3.1 - Subscriber+ Site Theme Switch via ats_create_child_theme","summary":"The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing any authenticated user such as a subscriber to switch the site's active site-wide, and allowing the same action to be triggered against any logged-in user including an administrator via CSRF.","evidence":"cve:CVE-2026-107887","products":[{"name":{"value":"Advanced Twenty Seventeen","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2026-107887","aliases":["CVE-2026-107887"],"metrics":[],"affected":[{"vendor":"Unknown","product":"Advanced Twenty Seventeen","versions":[{"status":"affected","version":"0","versionType":"semver","lessThanOrEqual":"1.3.1"}],"defaultStatus":"unknown"}],"modified":"2026-10-24T14:36:55.557Z","provider":"cve","references":["https://wpscan.com/vulnerability/e252c7ee-368d-4bfb-a964-06804747c162/"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}},{"other":{"type":"ssvc","content":{"id":"CVE-2026-107887","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-24T14:35:42.694961Z"}}}],"problemTypes":[{"descriptions":[{"lang":"en","type":"CWE","cweId":"CWE-862","description":"CWE-862 Missing Authorization"}]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-24T14:36:55.557Z"}}],"cna":{"orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan","dateUpdated":"2026-10-24T06:00:17.576Z"}}},"related_cves":[{"value":"CVE-2026-107887","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:bf37b52f-f500-480d-989e-769e8df525df","priority":{"reasons":[],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-107887","advisory_id":"bf37b52f-f500-480d-989e-769e8df525df","event_types":["advisory"],"published_at":"2026-10-25T16:12:37.509905+00:00","technologies":["advanced-twenty-seventeen","core-cve"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-24T06:00:17.576+00:00","detail_url":"/events/55827"}]}}],"next_after":56304,"next_before":56304}