Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Orbisius Clear all filters
TI-2024-28928 CVE-2024-43276 · GHSA-58mc-2jhj-w6qv

WordPress Child Theme Creator by Orbisius plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00308 Published 2024-08-18 No fix listed CWE-79
TI-2015-07833 CVE-2015-9456 · GHSA-9q39-xwg9-4fvm

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access…

Priority LOW 32

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01373 Published 2019-10-07 No fix listed CWE-732