high8.8
CVE-2020-28649
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.
Impact
The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Orbisius | Child Theme Creator | before 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/orbisius-child-theme-creator/#developers
- https://www.wordfence.com/blog/2020/10/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius/
- https://wordpress.org/plugins/orbisius-child-theme-creator/#developers
- https://www.wordfence.com/blog/2020/10/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius/