aThemeArt Theme Helper
aThemeArt Theme Helper has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for aThemeArt Theme Helper has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by mamgad. aThemeArt Theme Helper is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.2.2.
CVE-2026-111413aThemeArt Theme Helper <= 1.0.8 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
aThemeArt Theme Helper
Author
aThemeArt
Import aThemeArt official themes demo content, widgets and theme settings with just one click.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C