WordPress plugin
Child Theme Creator by Orbisius security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium3
- Low0
All Child Theme Creator by Orbisius vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium4.3 | Missing Authorization to Authenticated (Subscriber+) Cloud Snippet Update/Delete ≤1.5.5Update to 1.5.6 | CVE-2024-12263 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.5.4Update to 1.5.5 | CVE-2024-43276 | |
| High8.8 | Cross-Site Request Forgery to Arbitrary File Modification and Creation <1.5.2Update to 1.5.2 | CVE-2020-28649 | |
| Medium6.5 | Arbitrary File Write <1.2.8Update to 1.2.8 | CVE-2015-9456 |
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Cloud Snippet Update/Delete
≤1.5.5Update to 1.5.6
- Medium6.1Reflected Cross-Site Scripting
≤1.5.4Update to 1.5.5
- High8.8Cross-Site Request Forgery to Arbitrary File Modification and Creation
<1.5.2Update to 1.5.2
- Medium6.5Arbitrary File Write
<1.2.8Update to 1.2.8
Child Theme Creator by Orbisius: common questions
Does Child Theme Creator by Orbisius have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Child Theme Creator by Orbisius: 1 high, 3 medium. None are known to affect version null.
How do I check which version of Child Theme Creator by Orbisius I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Child Theme Creator by Orbisius vulnerability?
CVE-2024-12263, published Dec 11, 2024: Child Theme Creator by Orbisius <= 1.5.5 - Missing Authorization to Authenticated (Subscriber+) Cloud Snippet Update/Delete. Severity: Medium (CVSS 4.3).
Is any Child Theme Creator by Orbisius vulnerability listed in CISA KEV?
No. None of the known Child Theme Creator by Orbisius vulnerabilities is currently listed in the CISA KEV catalog.