Lucene search
+L

CVE-2015-9456

🗓️ 07 Oct 2019 14:27:05Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 73 Views🌐 WEB

The orbisius-child-theme-creator plugin for WordPress before 1.2.8 has incorrect access control for file modification

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2015-9456
8 Oct 201915:49
–circl
cnvd
CNVD
WordPress orbisius-child-theme-creator plugin arbitrary file modification vulnerability
20 Nov 201900:00
–cnvd
cvelist
Cvelist
CVE-2015-9456
7 Oct 201914:27
–cvelist
euvd
EUVD
EUVD-2015-9296
7 Oct 202500:30
–euvd
mend
Mend
CVE-2015-9456
7 Oct 201914:27
–mend
nvd
NVD
CVE-2015-9456
7 Oct 201915:15
–nvd
prion
Prion
Design/Logic Flaw
7 Oct 201915:15
–prion
ptsecurity
Positive Technologies
PT-2019-7415
7 Oct 201900:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2015-9456: Incorrect Permission Assignment for Critical Resource
7 Oct 201900:00
–rapid7
redhatcve
RedhatCVE
CVE-2015-9456
22 May 202509:33
–redhatcve
Rows per page
NVD
Node
orbisiuschild_theme_creatorRange<1.2.8wordpress
ParameterPositionPathDescriptionCWE
actionquery param/wp-admin/admin-ajax.phpIncorrect access control allows unauthorized file modification via the admin-ajax.php endpoint when specific parameters are provided.CWE-732
sub_cmdquery param/wp-admin/admin-ajax.phpIncorrect access control allows unauthorized file modification via the admin-ajax.php endpoint when specific parameters are provided.CWE-732
theme_1query param/wp-admin/admin-ajax.phpIncorrect access control allows unauthorized file modification via the admin-ajax.php endpoint when specific parameters are provided.CWE-732
theme_1_filequery param/wp-admin/admin-ajax.phpIncorrect access control allows unauthorized file modification via the admin-ajax.php endpoint when specific parameters are provided.CWE-732
theme_1_file_contentsquery param/wp-admin/admin-ajax.phpIncorrect access control allows unauthorized file modification via the admin-ajax.php endpoint when specific parameters are provided.CWE-732

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:36Current
6.6Medium risk
Vulners AI Score6.6
CVSS 24
CVSS 3.16.5
EPSS0.01373
73