Browser Theme Color – Address Bar Color & Dark Mode

Browser Theme Color – Address Bar Color & Dark Mode has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Browser Theme Color – Address Bar Color & Dark Mode has a vendor fix available, so running the current release closes it.

All of these findings were reported by Nguyen Xuan Chien. Browser Theme Color – Address Bar Color & Dark Mode is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.2.

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Browser Theme Color – Address Bar Color & Dark Mode vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2024-22291

Browser Theme Color <= 1.3 - Cross-Site Request Forgery via btc_settings_page

Read the full analysis

Vulnerability Records

1 records
Browser Theme Color – Address Bar Color & Dark Mode banner
Latestv2.0.1

Browser Theme Color – Address Bar Color & Dark Mode

Marco Milesi

Author

Marco Milesi

5.0(1)
100/100
Last Updated
2026-10-05 (24d ago)
Active Installs
2,000+
Downloads
34,807
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.2
Created
2016-06-09 (11y ago)

Discover a powerful solution for enhancing your website’s user experience across multiple platforms with our simple, lightweight, and effective plugin that adds the “theme-color” meta tag. Supported by Chrome, Edge and Samsung Internet on Android and by Safari up to iOS 18, our plugin follows the web standard to ensure a seamless user experience. In addition to its seamless compatibility, our plugin is fully customizable, allowing you to style it to match your brand’s unique identity. With the option to choose from a variety of colors, you can easily tailor the “theme-color” meta tag to perfectly complement your website’s design and layout. When you install the plugin for the first time, the color is automatically set to #23282D, which is the standard WordPress color. From there, you can easily customize the tag to match your brand, ensuring a fully immersive user experience that keeps visitors coming back for more. Features Sets the “theme-color” meta tag used by Chrome, Edge and Samsung Internet on Android, and Safari up to iOS 18 Optional separate color for visitors using dark mode (prefers-color-scheme) Experimental support for Safari on iOS 26+, which ignores the “theme-color” tag Color picker with live light/dark preview Developer filters: browser_theme_color and browser_theme_color_dark Lightweight: no external requests, no front-end scripts or styles Development happens on GitHub: milesimarco/browser-theme-color. Don’t settle for a subpar user experience on mobile devices. Elevate your website’s design and functionality with our “theme-color” meta tag plugin today, for free!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C