CVE-2023-5614

CVE-2023-5614 – Theme Switcha for WordPress is a stored XSS vulnerability in the shortcode shortname theme_switcha_list, present in all versions up to 3.3. Attack requires authentication at contributor level or higher. The issue stems from insufficient input sanitization and output escaping on us...

CVE-2025-46239

CVE-2025-46239 affects Theme Switcha (WordPress plugin) up to version 3.4. It is a Stored XSS caused by improper input neutralization during web page generation. The impact is that malicious input could execute scripts in users’ browsers when viewing affected pages. Mitigation: update to a versio...