Approved changes feed: RSS · Atom

cpe:2.3:a:wen-solutions:wp_child_theme_generator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWen Solutions (273e61f7-0361-5b6f-bf95-6560f076f1af)
ProductWp Child Theme Generator (f4c99044-f32c-5d56-b19a-e7a7e3d5b4ac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3610 vulnerable 2026-06-08 06:43:50.977165 WP Child Theme Generator <= 1.1.1 - Missing Authorization to Unauthenticated Child Theme Creation/Activation
MEDIUM (5.3)
The WP Child Theme Generator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wctg_easy_child_theme() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to create a blank child theme and activate it cause the site to whitescreen.
Published: 2024-06-21T02:05:42.362Z
Updated: 2026-04-08T16:54:31.962Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.