CVE-2015-9456

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the…

published October 7, 2019

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the wp-admin/admin-ajax.php?action=orbisius_ctc_theme_editor_ajax&sub_cmd=save_file theme_1, theme_1_file, or theme_1_file_contents parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01373 · 71.6th percentile
Published
2019-10-07T14:27Z
EPSS history
Timeline
  • 07 OCT 14:27Z
    The orbisius-child-theme-creator plugin before 1.2.8 for WordPress has incorrect access control for file modification via the…
    cvelistv5