← All advisories

High severity8.8NVD Advisory· Published Nov 16, 2020· Updated Jun 17, 2026

CVE-2020-28649

CVE-2020-28649

Description

The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/orbisius-child-theme-creatordescription
Orbisius/orbisius-child-theme-creatorllm-create
Range: <1.5.2
WordPress/Orbisius Child Theme Creatorllm-fuzzy
Range: <1.5.2
Package: https://wordpress.org/plugins/orbisius-child-theme-creator

Patches

Vulnerability mechanics

References

2

www.wordfence.com/blog/2020/10/high-severity-vulnerability-patched-in-child-theme-creator-by-orbisius/nvdExploitThird Party Advisory
wordpress.org/plugins/orbisius-child-theme-creator/nvdProductThird Party Advisory

News mentions

0

No linked articles in our index yet.