PT-2019-7415

Name of the Vulnerable Software and Affected Versions orbisius-child-theme-creator plugin versions prior to 1.2.8 Description The issue concerns incorrect access control for file modification. It can be exploited via the wp-admin/admin-ajax.php?action=orbisius ctc theme editor ajax&sub cmd=save...