Theme Switcher Reloaded

Theme Switcher Reloaded has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Theme Switcher Reloaded has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Skalucy. Theme Switcher Reloaded is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.0.38.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Theme Switcher Reloaded vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-53223

Theme Switcher Reloaded <= 1.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-08-25 00:00	Theme Switcher Reloaded <= 1.1 - Reflected Cross-Site Scripting Theme Switcher Reloaded <= 1.1	`CVE-2025-53223`	6.1 Medium	Skalucy	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.1

Theme Switcher Reloaded

Author

undoIT

2.3(3)

46/100

Last Updated

2014-10-20 (12y ago)

Active Installs

100+

Downloads

26,572

Requires WP

2.9.2+

Requires PHP

Tested up to

WP 4.0.38

Created

2008-02-22 (19y ago)

Theme Switcher Reloaded is sponsored by Themebot for use with the demos in the WordPress Themes section on themebot.com. Coding was done by kingler of 72pines. This is an updated version of the venerable themeswitcher by Ryan Boren and Theme Switcher Widget by Jared Bangs. Theme Switcher Reloaded adds new features and enhancements.

View on WordPress.org