CVE-2020-10257

Published: Mar 10, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.

Affected (103)

Products: Themerex: Ozeum Museum, Addons, Chit Club Board Games, Yottis Simple Portfolio, Helion Agency &portfolio, Amuli, Nelson Barbershop + Tattoo Salon, Hallelujah Church, Right Way, Prider Pride Fest, Mystik Esoterics, Skydiving And Flying Company, Dronex Aerial Photography Services, Samadhi Buddhist, Tantum Rent A Car, Rent A Bike, Rent A Scooter Multiskin Theme, Scientia Public Library, Blabber, Impacto Patronus Multi Landing, Rare Radio, Piqes Creative Startup & Agency Wordpress Theme, Kratz Digital Agency, Pixefy, Netmix Broadband & Telecom, Kids Care, Briny Diving Wordpress Theme, Tornados, Gridiron, Yungen Digital/marketing Agency, Fc United Football, Bugster Pests Control, Rumble Single Fighter Boxer, News, Gym, Store, Tacticool Shooting Range Wordpress Theme, Coinpress Cryptocurrency Magazine & Blog Wordpress Theme, Vihara Ashram, Buddhist, Katelyn Gutenberg Wordpress Blog Theme, Heaven 11 Multiskin Property Theme, Especio Food Gutenberg Theme, Partiso Electioncampaign, Kargo Freight Transport, Maxify Startup Blog, Lingvico Language Learning School, Aldo Gutenberg Wordpress Blog Theme, Vixus Startup / Mobile Application, Wellspring Water Filter Systems, Nazareth Church, Tediss Soft Play Area, Cafe & Child Care Center, Yolox Startup Magazine & Blog Wordpress Theme, Meals And Wheels Food Truck, Rosalinda Vegetarian & Health Coach, Vapester, Modern Housewife Housewife And Family Blog, Chainpress, Justitia Multiskin Lawyer Theme, Hobo Digital Nomad Blog, Rhodos Creative Corporate Wordpress Theme, Buzz Stone Magazine & Blog, Corredo Sport Event, Savejulia Personal Fundraising Campaign, Bonkozoo Zoo, Renewal Plastic Surgeon Clinic, Gloss Blog, Plumbing Repair, Building & Construction Wordpress Theme, Topper Theme And Skins

Themerex

63 products

Ozeum Museum

Addons

Chit Club Board Games

Yottis Simple Portfolio

Helion Agency &portfolio

Amuli

Nelson Barbershop + Tattoo Salon

Skydiving And Flying Company

Dronex Aerial Photography Services

Samadhi Buddhist

Tantum Rent A Car, Rent A Bike, Rent A Scooter Multiskin Theme

Scientia Public Library

Blabber

Impacto Patronus Multi Landing

Rare Radio

Piqes Creative Startup & Agency Wordpress Theme

Kratz Digital Agency

Pixefy

Netmix Broadband & Telecom

Kids Care

Briny Diving Wordpress Theme

Tornados

Gridiron

Yungen Digital/marketing Agency

Fc United Football

Bugster Pests Control

Rumble Single Fighter Boxer, News, Gym, Store

Tacticool Shooting Range Wordpress Theme

Coinpress Cryptocurrency Magazine & Blog Wordpress Theme

Vihara Ashram, Buddhist

Katelyn Gutenberg Wordpress Blog Theme

Heaven 11 Multiskin Property Theme

Especio Food Gutenberg Theme

Partiso Electioncampaign

Kargo Freight Transport

Maxify Startup Blog

Lingvico Language Learning School

Aldo Gutenberg Wordpress Blog Theme

Vixus Startup / Mobile Application

Wellspring Water Filter Systems

Nazareth Church

Tediss Soft Play Area, Cafe & Child Care Center

Yolox Startup Magazine & Blog Wordpress Theme

Meals And Wheels Food Truck

Rosalinda Vegetarian & Health Coach

Vapester

Modern Housewife Housewife And Family Blog

Chainpress

Justitia Multiskin Lawyer Theme

Hobo Digital Nomad Blog

Rhodos Creative Corporate Wordpress Theme

Buzz Stone Magazine & Blog

Corredo Sport Event

Savejulia Personal Fundraising Campaign

Bonkozoo Zoo

Renewal Plastic Surgeon Clinic

Gloss Blog

Plumbing Repair, Building & Construction Wordpress Theme

Topper Theme And Skins

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Ozeum Museum	Before 1.0.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.70.3
Themerex Chit Club Board Games	Before 1.0.1

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.67
Themerex Yottis Simple Portfolio	Before 1.0.1

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Helion Agency &portfolio	Before 1.0.3

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.66
Themerex Amuli	Before 1.0.2

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Nelson Barbershop + Tattoo Salon	Before 1.0.1.2001

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Hallelujah Church	Before 1.0.1

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Right Way	Before 4.0.1

Configuration I

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.65
Themerex Prider Pride Fest	Before 1.0.2

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Mystik Esoterics	Before 1.0.1

Configuration K

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.62.3
Themerex Skydiving And Flying Company	Before 1.0.1

Configuration L

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.62.1
Themerex Dronex Aerial Photography Services	Before 1.1.2001

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Samadhi Buddhist	Before 1.0.1

Configuration N

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.61.3
Themerex Tantum Rent A Car, Rent A Bike, Rent A Scooter Multiskin Theme	Before 1.0.2

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Scientia Public Library	Before 1.0.1

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Blabber	Before 1.5.2009

Configuration Q

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.61.1
Themerex Impacto Patronus Multi Landing	Before 1.1.2001

Configuration R

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.61
Themerex Rare Radio	Before 1.0.1

Configuration S

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.60
Themerex Piqes Creative Startup & Agency Wordpress Theme	Before 1.0.1

Configuration T

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.59.3
Themerex Kratz Digital Agency	Before 1.0.2

Configuration U

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.59.2
Themerex Pixefy	Before 1.0.1

Configuration V

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.59.1.1
Themerex Netmix Broadband & Telecom	Before 1.0.2

Configuration W

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.59
Themerex Kids Care	Before 3.0.5

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Briny Diving Wordpress Theme	Before 1.2.2000

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Tornados	Before 1.1.2001

Configuration Z

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.57.4
Themerex Gridiron	Before 1.0.2

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Yungen Digital/marketing Agency	Before 1.0.1

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.57.3
Themerex Fc United Football	Before 1.0.7

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.57.2
Themerex Bugster Pests Control	Before 1.0.2

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.57
Themerex Rumble Single Fighter Boxer, News, Gym, Store	Before 1.0.4

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.56
Themerex Tacticool Shooting Range Wordpress Theme	Before 1.0.1

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.55.4
Themerex Coinpress Cryptocurrency Magazine & Blog Wordpress Theme	Before 1.0.2

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.55.7
Themerex Vihara Ashram, Buddhist	Before 1.1.2001

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.55.3
Themerex Katelyn Gutenberg Wordpress Blog Theme	Before 1.0.4

Configuration I

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.55.1
Themerex Heaven 11 Multiskin Property Theme	Before 1.0.2

Configuration J

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.54
Themerex Especio Food Gutenberg Theme	Before 1.0.1

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Partiso Electioncampaign	Before 1.1.2002

Configuration L

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.53.3
Themerex Kargo Freight Transport	Before 1.1.2004

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Maxify Startup Blog	Before 1.0.4

Configuration N

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.53.1
Themerex Lingvico Language Learning School	Before 1.0.3

Configuration O

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.53.2
Themerex Aldo Gutenberg Wordpress Blog Theme	Before 1.0.2

Configuration P

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.52.2
Themerex Vixus Startup / Mobile Application	Before 1.0.4

Configuration Q

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Wellspring Water Filter Systems	Before 1.0.3

Configuration R

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.52.1
Themerex Nazareth Church	Before 1.0.5

Configuration S

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.53
Themerex Tediss Soft Play Area, Cafe & Child Care Center	Before 1.0.3

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Yolox Startup Magazine & Blog Wordpress Theme	Before 1.0.3

Configuration U

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.51.3
Themerex Meals And Wheels Food Truck	Before 1.0.3

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Rosalinda Vegetarian & Health Coach	Before 1.0.3

Configuration W

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Vapester	Before 1.1.2001

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Modern Housewife Housewife And Family Blog	Before 1.0.2

Configuration Y

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Chainpress	Before 1.0.3

Configuration Z

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.51.1
Themerex Justitia Multiskin Lawyer Theme	Before 1.0.3

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Themerex Hobo Digital Nomad Blog	Before 1.0.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.50.1
Themerex Rhodos Creative Corporate Wordpress Theme	Before 1.3.2001

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.50
Themerex Buzz Stone Magazine & Blog	Before 1.0.3

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.0.49.10
Themerex Corredo Sport Event	Before 1.1.2003

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.49.8
Themerex Savejulia Personal Fundraising Campaign	Before 1.0.3

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.49.6
Themerex Bonkozoo Zoo	Before 1.0.3

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.49.6.2
Themerex Renewal Plastic Surgeon Clinic	Before 1.0.3

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.49.5
Themerex Gloss Blog	Before 1.0.1

Configuration I

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.58.2
Themerex Plumbing Repair, Building & Construction Wordpress Theme	Before 3.0.1

Configuration J

2 vulnerable

Vulnerable Software	Affected Versions
Themerex Addons	Version 1.6.61.2
Themerex Topper Theme And Skins	All versions

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (2)

https://www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.