WP User Stylesheet Switcher

WP User Stylesheet Switcher has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for WP User Stylesheet Switcher has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Nguyen Xuan Chien. WP User Stylesheet Switcher is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.6.30.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all WP User Stylesheet Switcher vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-52792

WP User Stylesheet Switcher <= v2.2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
WP User Stylesheet Switcher banner
Latestvv2.2.0

WP User Stylesheet Switcher

vgstef

Author

vgstef

4.6(16)
92/100
Last Updated
2016-10-16 (10y ago)
Active Installs
100+
Downloads
15,263
Requires WP
3.6+
Requires PHP
0+
Tested up to
WP 4.6.30
Created
2013-10-22 (13y ago)

Sometimes, we just want to offer visitors simple variations of our website theme. Sometimes, we simply want to offer a stylesheet with improved accessbility. There are plugins that let you choose a different theme, but this plugin offers you to change only the stylesheet. In the admin settings, you can configure as many different stylesheets as you want. Those possibilities are offered in a list on the front page. The list of available stylesheets can be shown in a dropdown list or as a series of icons. It can be shown using the widget or in a page/post using the shortcode, or directly in the template using the php function. On the frontend, when a choice is made in the dropdown list, the webpage is reloaded using the chosen stylesheet. Plugin Features Easy installation/setup Any number of switchers Each switcher can have any number of stylesheet options Set a default stylesheet Multiple instances of switchers/stylesheet lists can be present on the same page. Choice between a dropdown or icon list for each list Can be used with a shortcode in a post/page, with the widget and with a php function in the theme For each list, possibility to show/hide the title Optional single switcher button (text or icon) Chose between theme relative path or absolute path (useful to customize multisite) Optional automatic theme rotation (weekday, week, month, year or random) Ready for internationalization Complete uninstall (removes options and widgets) Languages already available English French Spanish (thanks to Andrew Kurtis from WebHostingHub) Serbo-Croatian (thanks to Andrijana Nikolic from WebHostingGeeks) To see an example, visit plugin page.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C