Read the docs

Orbisius

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Orbisius records in CISA KEV

No Orbisius vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Child Theme Creator 3 records MEDIUM

Records

3 records

TI-2024-28928 CVE-2024-43276 · GHSA-58mc-2jhj-w6qv

WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-18 No fix listed CWE-79
TI-2015-07833 CVE-2015-9456 · GHSA-9q39-xwg9-4fvm

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access…

Priority LOW 32

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01373 Published 2019-10-07 No fix listed CWE-732
Open these records in search →