Extension WordPress
Vulnérabilités Child Theme Creator by Orbisius
Cette page rassemble les failles publiées pour Child Theme Creator by Orbisius, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Child Theme Creator by Orbisius
4 fiches
Child Theme Creator by Orbisius <= 1.5.5 – Missing Authorization to Authenticated (Subscriber+) Cloud Snippet Update/Delete
The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the cloud_delete() and cloud_update() functions in all versions up to, and including, 1.5.5. This makes…
*-1.5.5
1.5.6
11/12/2024
Child Theme Creator <= 1.5.4 – Reflected Cross-Site Scripting
The Child Theme Creator by Orbisius plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.5.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers…
*-1.5.4
1.5.5
16/08/2024
Child Theme Creator by Orbisius <= 1.5.1 – Cross-Site Request Forgery to Arbitrary File Modification and Creation
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file that makes it possible for attackers to modify arbitrary files and create new files to achieve remote code execution.
[*, 1.5.2)
1.5.2
14/10/2020
Child Theme Creator by Orbisius <= 1.2.7 – Arbitrary File Write
The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.
[*, 1.2.8)
1.2.8
08/07/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.