VulnSocial

CVE-2026-111413

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-352

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-17: 110-17
Referenced assets1 URL
Full discourse1 post
  • NewNormal Security@NewScanTeam

    NewNormal Security turns CVEs since the previous batch into new detections, every day. 𝗗𝗮𝗶𝗹𝘆 𝗖𝗩𝗘 𝗥𝗲𝗽𝗼𝗿𝘁 — 17 Oct 2026 𝗔𝗱𝗱𝗲𝗱 to NewScan 𝘁𝗼𝗱𝗮𝘆: 🚨 Remote-support appliance matched to an actively-exploited spoofing bug — file operations on the appliance itself (BeyondTrust CVE-2026-102764) 📦 Database version read off the connection handshake — the server names its own build before anyone authenticates (MariaDB CVE-2026-85746, CVE-2026-85748, CVE-2026-97380) 📦 Vulnerable WordPress plugin builds — object injection at checkout, a raced OTP lockout, customer records read by anyone (LearnPress CVE-2026-104736, LatePoint CVE-2026-110653, CVE-2026-111602, ThirstyAffiliates CVE-2026-97314, aThemeArt CVE-2026-111413) Test your stack with NewScan — free, self-hosted: https://newnormalsecurity.com/newscan?utm_source=x&utm_medium=social&utm_campaign=daily-cve #infosec #AppSec #AuthBypass #CSO #REDTEAM

    0000041
    6 followersView on X

Explore more

Back to dashboard