A vulnerability identified as problematic has been detected in Theme Editor Plugin up to 3.0 on WordPress. Affected is the function
theme_editor_theme. The manipulation leads to cross-site request forgery.
This vulnerability is traded as CVE-2025-9890. It is possible to initiate the attack remotely. There is no exploit available.
