Approved changes feed: RSS · Atom

cpe:2.3:a:wensolutions:wp_child_theme_generator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWensolutions (bcde2d85-307b-5876-8b13-d2d6b22a90c0)
ProductWp Child Theme Generator (b8d7be5a-d85c-5ffe-a15d-aea2b4548ba0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wpplugins/wp-child-theme-generator purl2cpe 2026-06-01 10:12:52.446584

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3610 vulnerable 2026-06-08 06:43:50.976224 WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation
MEDIUM (5.3)
The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child theme and activate it cause the site to whitescreen.
Published: 2024-06-21T02:05:42.362Z
Updated: 2026-04-08T16:54:31.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47873 vulnerable 2026-06-08 06:14:25.887910 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9.
Published: 2024-03-26T20:34:49.984Z
Updated: 2026-04-28T16:08:53.420Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.