← Back

Orbisius

orbisius

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Child Theme Creator
child_theme_creator
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-43276
1Orbisius
1Child Theme Creator
Sep 17, 2024
Aug 18, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from...Show more
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from n/a through 1.5.4.Show less
CVE-2020-28649
1Orbisius
1Child Theme Creator
Nov 21, 2024
Nov 16, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.
CVE-2015-9456
1Orbisius
1Child Theme Creator
Nov 21, 2024
Oct 7, 2019
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme...Show more
The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.Show less