Skywarrior vulnerabilities

Products

• Arcane 1
• Blackfyre 1

Latest Skywarrior CVEs

Newest publication first

1. CVE-2026-39641 WordPress Blackfyre theme <= 2.5.4 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-04-08

   Medium·CVSS 6.5 EPSS 0.18%

   Cross-Site Request Forgery (CSRF) vulnerability in Skywarrior Blackfyre blackfyre allows Cross Site Request Forgery.This issue affects Blackfyre: from n/a through <= 2.5.4.

2. CVE-2025-69031 WordPress Arcane theme <= 3.6.6 - Broken Access Control vulnerability

   Published 2025-12-30

   Medium·CVSS 5.3 EPSS 0.28%

   Missing Authorization vulnerability in Skywarrior Arcane arcane allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Arcane: from n/a through <= 3.6.6.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.