Vulnerability · Published Mar 26, 2024 · Assigned by Patchstack
CVE-2023-47873WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
Critical 9.1
In plain English
A critical-severity unrestricted file upload in WP Child Theme Generator from WEN Solutions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei.
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)2.3%top 16.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Nuclei
Official description
Unrestricted Upload of File with Dangerous Type vulnerability in WEN Solutions WP Child Theme Generator.This issue affects WP Child Theme Generator: from n/a through 1.0.9.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WEN Solutions | WP Child Theme Generator | n/a – through 1.0.9 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H