WordPress Plugin Vulnerabilities

Child Theme Creator by Orbisius < 1.2.8 - Arbitrary File Write

Description

The Child Theme Creator by Orbisius WordPress plugin was affected by an Arbitrary File Write security vulnerability.

Affects Plugins

Plugin icon
orbisius-child-theme-creator
Fixed in 1.2.8

References

CVE
CVE-2015-9456
URL
http://cinu.pl/research/wp-plugins/mail_28c91eee00e8e4b5868ebc58b5b1f730.html
URL
http://blog.cinu.pl/2015/11/php-static-code-analysis-vs-top-1000-wordpress-plugins.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
c138de11-545b-4b8f-a40d-844ffb00a17e

Timeline

Publicly Published
2015-07-08 (about 10 years ago)
Added
2015-11-24 (about 10 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2023-06-28
Title
Active Directory Integration / LDAP Integration < 4.1.6 - Sensitive Information Disclosure
Published
2014-04-28
Title
TinyMCE Color Picker 1.1 - tinymce-colorpicker.php Missing edit_others_posts Capability Check
Published
2018-03-28
Title
WP Security Audit Log Plugin <= 3.1.1 - Sensitive Information Disclosure
Published
2025-02-26
Title
Jeg Elementor Kit < 2.6.12 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Published
2025-02-17
Title
Uncode < 2.9.1.7 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed