WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
https://blog.wpscan.com/2020/10/30/wordpress-5.5.2-security-release.html https://github.com/WordPress/wordpress-develop/commit/69e832398254b7f47d137afaed40ff186015a71b