CVE Database /
CVE-2024-12263
CVE · Medium
CVE-2024-12263 — Child Theme Creator by Orbisius [orbisius-child-theme-creator] < 1.5.6 (closed)
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-12263
|
Child Theme Creator by Orbisius [orbisius-child-theme-creator] < 1.5.6 (closed) |
Missing Authorization |
Medium
4.3
|
< 1.5.6
|
1.5.6 |
2024-12-11 |
—
|
CVE-2024-12263
The Child Theme Creator by Orbisius plugin was vulnerable to unauthorized data manipulation in versions up to 1.5.5 because the cloud_delete() and cloud_update() functions lacked proper permission validation. This flaw allowed any authenticated user with Subscriber-level permissions or higher to modify and remove cloud snippets without authorization. The vulnerability originated in the Cloud Library Addon component that has since been completely removed from the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings