WordPress WP Child Theme Generator plugin <= 1.1.1 - Unauthenticated Child Theme Creation/Activation vulnerability

Unauthenticated Child Theme Creation/Activation vulnerability discovered by Lucio Sá in WordPress Plugin WP Child Theme Generator versions = 1.1.1...

WordPress WP Child Theme Generator Plugin <= 1.1.1 is vulnerable to Broken Access Control

Software WP Child Theme Generator Type Plugin Vulnerable versions = 1.1.1 Fixed in 1.1.2 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-3610 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 0ee7eb453287 Credits Lucio Sá Requir...

PT-2024-26891 · WordPress · Wp Child Theme Generator

Name of the Vulnerable Software and Affected Versions: WP Child Theme Generator plugin for WordPress versions up to, and including, 1.1.1 Description: The issue is related to a missing capability check on the wctg easy child theme function, allowing unauthorized modification of data. This enables...

CVE-2024-31279

Cross-Site Request Forgery CSRF vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0...

CVE-2024-31279

CVE-2024-31279 is a CSRF vulnerability in WordPress Generate Child Theme (Generate Child Theme plugin). Public details reference an issue affecting versions from n/a up to 2.0. Root cause described as cross-site request forgery leading to unauthorized actions within a user account. Connected Red ...

CVE-2024-31279 WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0...

CVE-2024-31279 WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Catch Plugins Generate Child Theme.This issue affects Generate Child Theme: from n/a through 2.0...

WordPress Plugin Generate Child Theme 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-23924 · Unknown · Generate Child Theme

Name of the Vulnerable Software and Affected Versions: Generate Child Theme versions prior to 2.0 Description: A Cross-Site Request Forgery CSRF issue affects the Generate Child Theme. This issue can be exploited to perform unintended actions on a user's account. Recommendations: For versions pri...

Generate Child Theme < 2.0.1 - Cross-Site Request Forgery via process_create_form()

Description The Generate Child Theme plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.0. This is due to missing or incorrect nonce validation on the processcreateform function. This makes it possible for unauthenticated attackers to generate a...

WordPress Generate Child Theme plugin <= 2.0 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Generate Child Theme versions = 2.0...

WordPress Generate Child Theme Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Generate Child Theme Type Plugin Vulnerable versions = 2.0 Fixed in 2.0.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31279 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 3373514288c6 Credits Abdi Pranata...

EUVD-2023-51963

Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9...

CVE-2023-47873 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9...

CVE-2023-47873 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9...

PT-2024-13528

Name of the Vulnerable Software and Affected Versions: WP Child Theme Generator versions 1.0.9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which affects the WP Child Theme Generator. This allows for the upload of files with potentially...

WordPress Plugin WP Child Theme Generator 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress WP Child Theme Generator Plugin <= 1.1.2 is vulnerable to Arbitrary File Upload

Software WP Child Theme Generator Type Plugin Vulnerable versions = 1.1.2 Fixed in 1.1.3 OWASP Top 10 A4: Insecure Design Classification Arbitrary File Upload CVE CVE-2023-47873 Patch priority Low CVSS severity Low 9.1 Developer Claim ownership PSID e915ca3d162f Credits Dateoljo of BoB 12th...

Malicious code in doks-child-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402865140408df564c64110cbb63271f62bb71a0fb29453688fa1f876accc457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-270 Malicious code in doks-child-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402865140408df564c64110cbb63271f62bb71a0fb29453688fa1f876accc457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...