CVE-2026-107887

The Advanced Twenty Seventeen WordPress plugin (versions through 1.3.1 ) is vulnerable to a security flaw because it fails to perform capability or nonce checks on the action that creates and activates its bundled child theme. This allows an authenticated user, such as a subscriber , to switch th...