Orbisius

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43276 Aug 18, 14:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.5.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Child Theme Creator Orbisius

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2020-28649 Nov 16, 04:15 HIGH POC This Week

The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Wordpress Plugin Child Theme Creator Orbisius

NVD

CVSS 3.1

8.8

EPSS

0.8%

CVE-2024-43276

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Child Theme Creator Orbisius

NVD

CVE-2020-28649

EPSS 1% CVSS 8.8

HIGH POC This Week

WordPress CSRF Wordpress Plugin +2

NVD