Description
WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
Remediation
References
Related Vulnerabilities
WordPress Plugin DVS Custom Notification Multiple Cross-Site Request Forgery Vulnerabilities (1.0.1)
Jenkins Missing Release of Resource after Effective Lifetime Vulnerability (CVE-2018-1999043)
WordPress Plugin WP Import Export Lite Security Bypass (3.9.4)
WordPress Plugin Disable Image Right Click Cross-Site Scripting (1.0)
Oracle Application Server CVE-2006-0435 Vulnerability (CVE-2006-0435)