Child Theme Creator by Orbisius (WordPress) Update
2507Warning Date
Severity Level
Warning Number
Target Sector
15 October, 2020
● High
2020-1926
All
Description:
Wordfence has released security update to address a vulnerability in the following plugin:
- Child Theme Creator by Orbisius
- Version 1.5.1 and earlier
Threats:
Attacker could exploit this vulnerability by doing the following:
- Information disclosure.
- Cross-site request forgery (CSRF).
- Remote code execution.
Best practice and Recommendations:
The CERT team encourages users to review Wordfence security advisory and apply the necessary updates: