CVE-2020-10257

🗓️ 09 Mar 2020 23:41:34Reported by mitreType

cve🔗 web.nvd.nist.gov👁 223 Views🌐 WEB

The ThemeREX Addons plugin for WordPress before 2020-03-09 allows unauthorized PHP function execution

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2020-10257	22 Oct 202521:02	–	circl
CNVD	ThemeREX Addons Remote Code Execution Vulnerability	10 Mar 202000:00	–	cnvd
Cvelist	CVE-2020-10257	9 Mar 202023:41	–	cvelist
EUVD	EUVD-2020-2712	7 Oct 202500:30	–	euvd
Nuclei	ThemeREX Addons - Remote Code Execution	15 Aug 202602:21	–	nuclei
NVD	CVE-2020-10257	10 Mar 202000:15	–	nvd
Patchstack	WordPress Ozeum premium theme <= 1.0.1 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Patchstack	WordPress Yottis premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Patchstack	WordPress Chit Club premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Prion	Design/Logic Flaw	10 Mar 202000:15	–	prion

NVD

Node

AND

themerex addonsMatch1.70.3wordpress

themerex ozeum-museumRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.70.3wordpress

themerex chit_club-board_gamesRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.67wordpress

themerex yottis-simple_portfolioRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.66wordpress

themerex helion-agency_&portfolioRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.66wordpress

themerex amuliRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.65wordpress

themerex nelson-barbershop_+_tattoo_salonRange<1.0.1.2001wordpress

Node

AND

themerex addonsMatch1.6.65wordpress

themerex hallelujah-churchRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.65wordpress

themerex right_wayRange<4.0.1wordpress

Node

AND

themerex addonsMatch1.6.65wordpress

themerex prider-pride_festRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.62.3wordpress

themerex mystik-esotericsRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.62.3wordpress

themerex skydiving_and_flying_companyRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.62.1wordpress

themerex dronex-aerial_photography_servicesRange<1.1.2001wordpress

Node

AND

themerex addonsMatch1.6.61.2wordpress

themerex samadhi-buddhistRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.61.3wordpress

themerex tantum-rent_a_car,_rent_a_bike,_rent_a_scooter_multiskin_themeRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.61.2wordpress

themerex scientia-public_libraryRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.61.2wordpress

themerex blabberRange<1.5.2009wordpress

Node

AND

themerex addonsMatch1.6.61.1wordpress

themerex impacto_patronus_multi-landingRange<1.1.2001wordpress

Node

AND

themerex addonsMatch1.6.61wordpress

themerex rare_radioRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.60wordpress

themerex piqes-creative_startup_&_agency_wordpress_themeRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.59.3wordpress

themerex kratz-digital_agencyRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.59.2wordpress

themerex pixefyRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.59.1.1wordpress

themerex netmix-broadband_&_telecomRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.59wordpress

themerex kids_careRange<3.0.5wordpress

Node

AND

themerex addonsMatch1.6.58.2wordpress

themerex briny-diving_wordpress_themeRange<1.2.2000wordpress

Node

AND

themerex addonsMatch1.6.57.3wordpress

themerex tornadosRange<1.1.2001wordpress

Node

AND

themerex addonsMatch1.6.57.4wordpress

themerex gridironRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.57.2wordpress

themerex yungen-digital/marketing_agencyRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.57.3wordpress

themerex fc_united-footballRange<1.0.7wordpress

Node

AND

themerex addonsMatch1.6.57.2wordpress

themerex bugster-pests_controlRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.57wordpress

themerex rumble-single_fighter_boxer,_news,_gym,_storeRange<1.0.4wordpress

Node

AND

themerex addonsMatch1.6.56wordpress

themerex tacticool-shooting_range_wordpress_themeRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.55.4wordpress

themerex coinpress-cryptocurrency_magazine_&_blog_wordpress_themeRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.55.7wordpress

themerex vihara-ashram,_buddhistRange<1.1.2001wordpress

Node

AND

themerex addonsMatch1.6.55.3wordpress

themerex katelyn-gutenberg_wordpress_blog_themeRange<1.0.4wordpress

Node

AND

themerex addonsMatch1.6.55.1wordpress

themerex heaven_11-multiskin_property_themeRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.54wordpress

themerex especio-food_gutenberg_themeRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.53.1wordpress

themerex partiso_electioncampaignRange<1.1.2002wordpress

Node

AND

themerex addonsMatch1.6.53.3wordpress

themerex kargo-freight_transportRange<1.1.2004wordpress

Node

AND

themerex addonsMatch1.6.53.2wordpress

themerex maxify-startup_blogRange<1.0.4wordpress

Node

AND

themerex addonsMatch1.6.53.1wordpress

themerex lingvico-language_learning_schoolRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.53.2wordpress

themerex aldo-gutenberg_wordpress_blog_themeRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.52.2wordpress

themerex vixus-startup_/_mobile_applicationRange<1.0.4wordpress

Node

AND

themerex addonsMatch1.6.52.1wordpress

themerex wellspring_water_filter_systemsRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.52.1wordpress

themerex nazareth-churchRange<1.0.5wordpress

Node

AND

themerex addonsMatch1.6.53wordpress

themerex tediss-soft_play_area,_cafe_&_child_care_centerRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.51.3wordpress

themerex yolox-startup_magazine_&_blog_wordpress_themeRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.51.3wordpress

themerex meals_and_wheels-food_truckRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.51.1wordpress

themerex rosalinda-vegetarian_&_health_coachRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.50wordpress

themerex vapesterRange<1.1.2001wordpress

Node

AND

themerex addonsMatch1.6.50wordpress

themerex modern_housewife-housewife_and_family_blogRange<1.0.2wordpress

Node

AND

themerex addonsMatch1.6.50.1wordpress

themerex chainpressRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.51.1wordpress

themerex justitia-multiskin_lawyer_themeRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.50wordpress

themerex hobo_digital_nomad_blogRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.50.1wordpress

themerex rhodos-creative_corporate_wordpress_themeRange<1.3.2001wordpress

Node

AND

themerex addonsMatch1.6.50wordpress

themerex buzz_stone-magazine_&_blogRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.0.49.10wordpress

themerex corredo_sport_eventRange<1.1.2003wordpress

Node

AND

themerex addonsMatch1.6.49.8wordpress

themerex savejulia_personal_fundraising_campaignRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.49.6wordpress

themerex bonkozoo_zooRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.49.6.2wordpress

themerex renewal-plastic_surgeon_clinicRange<1.0.3wordpress

Node

AND

themerex addonsMatch1.6.49.5wordpress

themerex gloss_blogRange<1.0.1wordpress

Node

AND

themerex addonsMatch1.6.58.2wordpress

themerex plumbing-repair,_building_&_construction_wordpress_themeRange<3.0.1wordpress

Node

AND

themerex addonsMatch1.6.61.2wordpress

themerex topper_theme_and_skinsMatch-wordpress

Source	Link
wordfence	www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/

Parameter	Position	Path	Description	CWE
sc	query param	wp-json/trx_addons/V2/get/sc_layout	Exposed REST endpoint without access control allows remote code execution by leveraging sc parameter to execute PHP functions and potentially create admin users.	CWE-94, CWE-862
role	query param	wp-json/trx_addons/V2/get/sc_layout	Exposed REST endpoint without access control allows remote code execution by leveraging sc parameter to execute PHP functions and potentially create admin users.	CWE-94, CWE-862
user_login	query param	wp-json/trx_addons/V2/get/sc_layout	Exposed REST endpoint without access control allows remote code execution by leveraging sc parameter to execute PHP functions and potentially create admin users.	CWE-94, CWE-862
user_pass	query param	wp-json/trx_addons/V2/get/sc_layout	Exposed REST endpoint without access control allows remote code execution by leveraging sc parameter to execute PHP functions and potentially create admin users.	CWE-94, CWE-862

17 Jun 2026 02:47Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

CVSS 39.8

EPSS0.08877