The orbisius-child-theme-creator plugin before 1.5.2 for WordPress allows CSRF via orbisius_ctc_theme_editor_manage_file.

Published Nov 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre