CVE-2024-43276

MEDIUM 6.1CVE-2024-43276 · Published 18/08/2024 · updated 17/06/2026

In short

CVE-2024-43276 is a MEDIUM (CVSS 6.1) vulnerability affecting child theme creator (orbisius).
Chance of exploitation in the next 30 days (EPSS): 0.31%, higher than 23.7% of all vulnerabilities.
Fix: update to 1.5.5 or later.

Package	Affected versions	Patched versions
child theme creator orbisius	`< 1.5.5`	`1.5.5`

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Svetoslav Marinov (Slavi) Child Theme Creator allows Reflected XSS.This issue affects Child Theme Creator: from n/a through 1.5.4.

References

patchstack.com/database/vulnerability/orbisius-child-theme-creator/wordpress-child-theme-creator-by-orbisius-plugin-1-5-4-cross-site-scripting-xss-vulnerability · Third Party Advisory

More vulnerabilities in child theme creator

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free