WordPress Child Themes plugin cross-site scripting vulnerability

WordPress Child Themes plugin is mainly used to simplify the creation and management of child themes, through automation tools to help users quickly generate child themes based on the parent theme. A cross-site scripting vulnerability exists in the WordPress Child Themes plugin, which stems from...

CVE-2025-52755

CVE-2025-52755 describes a Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Child Themes (component: child-themes ) that allows reflected XSS due to improper input handling during web page generation. Affected versions are listed as through 1.0.1 . The CVE records (NVD/Red Hat/EU ...

WordPress Child Themes plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Child Themes versions = 1.0.1...