Vulnerabilities

TI-2024-03365 CVE-2024-3610 · GHSA-6vg7-562r-mh4w

WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation

LOW 31

The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-06-21 No fix listed CWE-862

TI-2023-25977 CVE-2023-47873 · GHSA-6cr3-7r4p-pwrg

WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability

MEDIUM 46

Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.02276 Published 2024-03-26 No fix listed CWE-434

Vulnerabilities

Filters

WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation

WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability