CVE-2025-39438

Summary

CVE-2025-39438 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the Theme Changer application in momen2009, from version n/a through 1.3. An attacker could exploit this issue by tricking a user into clicking a malicious link, which would allow the attacker to perform unintended actions on behalf of the user, such as changing theme settings. This could lead to potential security risks and unauthorized modifications to the affected system. It is recommended that users update to the latest version of Theme Changer to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.