Boletines de Vulnerabilidades

High Severity Vulnerability Patched in Child Theme Creator by Orbisius


Información sobre el sistema

   
Software afectado Wordpress

Descripción

On September 9, 2020, our Threat Intelligence team discovered a vulnerability in Child Theme Creator by Orbisius, a WordPress plugin installed on over 30,000 sites. This flaw gave attackers the ability to forge requests on behalf of an administrator in order to modify arbitrary theme files and create new PHP files, which could allow an […]

More info:

https://www.wordfence.com/blog/2020/10/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius/

Identificadores estándar

Propiedad Valor
CVE

Histórico de versiones

Versión Comentario Data
1.0 Advisory issued 2020-10-20
Ministerio de Defensa
CNI
CCN
CCN-CERT