Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Orbisius Subscribe
Filtered by product Child Theme Creator
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-28649 1 Orbisius 1 Child Theme Creator 2020-11-27 6.8 MEDIUM 8.8 HIGH
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.
CVE-2015-9456 1 Orbisius 1 Child Theme Creator 2019-10-10 4.0 MEDIUM 6.5 MEDIUM
The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.