Child Theme Creator
Orbisius · 3 CVEs
CVE-2024-43276
HIGH
WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability
Aug 18, 2024
CVE-2020-28649
HIGH
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_fil…
Nov 16, 2020
CVE-2015-9456
MEDIUM
The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification v…
Oct 7, 2019
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-43276 | WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability | HIGH | 0.31% | Aug 18, 2024 |
| CVE-2020-28649 | The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file. | HIGH | 0.77% | Nov 16, 2020 |
| CVE-2015-9456 | The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=or… | MEDIUM | 1.37% | Oct 7, 2019 |
Showing 1 to 3 of 3 CVEs