Child Theme Generator

Child Theme Generator has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2021; none of them are fixed as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 6.4 out of 10. 2021 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

None of the 2 issues recorded for Child Theme Generator have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2021.

All of these findings were reported by ZhongFu Su.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Child Theme Generator vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2021-24982

Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2021-11-19 00:00	Child Theme Generator <= 2.2.7 Cross-Site Request Forgery to Arbitrary Folder Deletion Child Theme Generator <= 2.2.7	`N/A`	5.4 Medium	Anonymous	No
2021-11-18 00:00	Child Theme Generator <= 2.2.7 - Reflected Cross-Site Scripting Child Theme Generator <= 2.2.7	`CVE-2021-24982`	6.4 Medium	ZhongFu Su	No

Showing 1–2 of 2 reports