CVE-2020-10257

🗓️ 09 Mar 2020 23:41:34Reported by mitreType

cve🔗 web.nvd.nist.gov👁 197 Views🌐 WEB

The ThemeREX Addons plugin for WordPress before 2020-03-09 allows unauthorized PHP function execution

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2020-10257	22 Oct 202521:02	–	circl
CNVD	ThemeREX Addons Remote Code Execution Vulnerability	10 Mar 202000:00	–	cnvd
Cvelist	CVE-2020-10257	9 Mar 202023:41	–	cvelist
EUVD	EUVD-2020-2712	7 Oct 202500:30	–	euvd
Nuclei	ThemeREX Addons - Remote Code Execution	7 Jun 202603:02	–	nuclei
NVD	CVE-2020-10257	10 Mar 202000:15	–	nvd
Patchstack	WordPress Ozeum premium theme <= 1.0.1 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Patchstack	WordPress Yottis premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Patchstack	WordPress Chit Club premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability	18 Feb 202000:00	–	patchstack
Prion	Design/Logic Flaw	10 Mar 202000:15	–	prion

NVD

Node

themerex addonsMatch1.70.3wordpress

AND

themerex ozeum-museumRange<1.0.2wordpress

Node

themerex addonsMatch1.70.3wordpress

AND

themerex chit_club-board_gamesRange<1.0.1wordpress

Node

themerex addonsMatch1.6.67wordpress

AND

themerex yottis-simple_portfolioRange<1.0.1wordpress

Node

themerex addonsMatch1.6.66wordpress

AND

themerex helion-agency_&portfolioRange<1.0.3wordpress

Node

themerex addonsMatch1.6.66wordpress

AND

themerex amuliRange<1.0.2wordpress

Node

themerex addonsMatch1.6.65wordpress

AND

themerex nelson-barbershop_+_tattoo_salonRange<1.0.1.2001wordpress

Node

themerex addonsMatch1.6.65wordpress

AND

themerex hallelujah-churchRange<1.0.1wordpress

Node

themerex addonsMatch1.6.65wordpress

AND

themerex right_wayRange<4.0.1wordpress

Node

themerex addonsMatch1.6.65wordpress

AND

themerex prider-pride_festRange<1.0.2wordpress

Node

themerex addonsMatch1.6.62.3wordpress

AND

themerex mystik-esotericsRange<1.0.1wordpress

Node

themerex addonsMatch1.6.62.3wordpress

AND

themerex skydiving_and_flying_companyRange<1.0.1wordpress

Node

themerex addonsMatch1.6.62.1wordpress

AND

themerex dronex-aerial_photography_servicesRange<1.1.2001wordpress

Node

themerex addonsMatch1.6.61.2wordpress

AND

themerex samadhi-buddhistRange<1.0.1wordpress

Node

themerex addonsMatch1.6.61.3wordpress

AND

themerex tantum-rent_a_car,_rent_a_bike,_rent_a_scooter_multiskin_themeRange<1.0.2wordpress

Node

themerex addonsMatch1.6.61.2wordpress

AND

themerex scientia-public_libraryRange<1.0.1wordpress

Node

themerex addonsMatch1.6.61.2wordpress

AND

themerex blabberRange<1.5.2009wordpress

Node

themerex addonsMatch1.6.61.1wordpress

AND

themerex impacto_patronus_multi-landingRange<1.1.2001wordpress

Node

themerex addonsMatch1.6.61wordpress

AND

themerex rare_radioRange<1.0.1wordpress

Node

themerex addonsMatch1.6.60wordpress

AND

themerex piqes-creative_startup_&_agency_wordpress_themeRange<1.0.1wordpress

Node

themerex addonsMatch1.6.59.3wordpress

AND

themerex kratz-digital_agencyRange<1.0.2wordpress

Node

themerex addonsMatch1.6.59.2wordpress

AND

themerex pixefyRange<1.0.1wordpress

Node

themerex addonsMatch1.6.59.1.1wordpress

AND

themerex netmix-broadband_&_telecomRange<1.0.2wordpress

Node

themerex addonsMatch1.6.59wordpress

AND

themerex kids_careRange<3.0.5wordpress

Node

themerex addonsMatch1.6.58.2wordpress

AND

themerex briny-diving_wordpress_themeRange<1.2.2000wordpress

Node

themerex addonsMatch1.6.57.3wordpress

AND

themerex tornadosRange<1.1.2001wordpress

Node

themerex addonsMatch1.6.57.4wordpress

AND

themerex gridironRange<1.0.2wordpress

Node

themerex addonsMatch1.6.57.2wordpress

AND

themerex yungen-digital/marketing_agencyRange<1.0.1wordpress

Node

themerex addonsMatch1.6.57.3wordpress

AND

themerex fc_united-footballRange<1.0.7wordpress

Node

themerex addonsMatch1.6.57.2wordpress

AND

themerex bugster-pests_controlRange<1.0.2wordpress

Node

themerex addonsMatch1.6.57wordpress

AND

themerex rumble-single_fighter_boxer,_news,_gym,_storeRange<1.0.4wordpress

Node

themerex addonsMatch1.6.56wordpress

AND

themerex tacticool-shooting_range_wordpress_themeRange<1.0.1wordpress

Node

themerex addonsMatch1.6.55.4wordpress

AND

themerex coinpress-cryptocurrency_magazine_&_blog_wordpress_themeRange<1.0.2wordpress

Node

themerex addonsMatch1.6.55.7wordpress

AND

themerex vihara-ashram,_buddhistRange<1.1.2001wordpress

Node

themerex addonsMatch1.6.55.3wordpress

AND

themerex katelyn-gutenberg_wordpress_blog_themeRange<1.0.4wordpress

Node

themerex addonsMatch1.6.55.1wordpress

AND

themerex heaven_11-multiskin_property_themeRange<1.0.2wordpress

Node

themerex addonsMatch1.6.54wordpress

AND

themerex especio-food_gutenberg_themeRange<1.0.1wordpress

Node

themerex addonsMatch1.6.53.1wordpress

AND

themerex partiso_electioncampaignRange<1.1.2002wordpress

Node

themerex addonsMatch1.6.53.3wordpress

AND

themerex kargo-freight_transportRange<1.1.2004wordpress

Node

themerex addonsMatch1.6.53.2wordpress

AND

themerex maxify-startup_blogRange<1.0.4wordpress

Node

themerex addonsMatch1.6.53.1wordpress

AND

themerex lingvico-language_learning_schoolRange<1.0.3wordpress

Node

themerex addonsMatch1.6.53.2wordpress

AND

themerex aldo-gutenberg_wordpress_blog_themeRange<1.0.2wordpress

Node

themerex addonsMatch1.6.52.2wordpress

AND

themerex vixus-startup_/_mobile_applicationRange<1.0.4wordpress

Node

themerex addonsMatch1.6.52.1wordpress

AND

themerex wellspring_water_filter_systemsRange<1.0.3wordpress

Node

themerex addonsMatch1.6.52.1wordpress

AND

themerex nazareth-churchRange<1.0.5wordpress

Node

themerex addonsMatch1.6.53wordpress

AND

themerex tediss-soft_play_area,_cafe_&_child_care_centerRange<1.0.3wordpress

Node

themerex addonsMatch1.6.51.3wordpress

AND

themerex yolox-startup_magazine_&_blog_wordpress_themeRange<1.0.3wordpress

Node

themerex addonsMatch1.6.51.3wordpress

AND

themerex meals_and_wheels-food_truckRange<1.0.3wordpress

Node

themerex addonsMatch1.6.51.1wordpress

AND

themerex rosalinda-vegetarian_&_health_coachRange<1.0.3wordpress

Node

themerex addonsMatch1.6.50wordpress

AND

themerex vapesterRange<1.1.2001wordpress

Node

themerex addonsMatch1.6.50wordpress

AND

themerex modern_housewife-housewife_and_family_blogRange<1.0.2wordpress

Node

themerex addonsMatch1.6.50.1wordpress

AND

themerex chainpressRange<1.0.3wordpress

Node

themerex addonsMatch1.6.51.1wordpress

AND

themerex justitia-multiskin_lawyer_themeRange<1.0.3wordpress

Node

themerex addonsMatch1.6.50wordpress

AND

themerex hobo_digital_nomad_blogRange<1.0.3wordpress

Node

themerex addonsMatch1.6.50.1wordpress

AND

themerex rhodos-creative_corporate_wordpress_themeRange<1.3.2001wordpress

Node

themerex addonsMatch1.6.50wordpress

AND

themerex buzz_stone-magazine_&_blogRange<1.0.3wordpress

Node

themerex addonsMatch1.0.49.10wordpress

AND

themerex corredo_sport_eventRange<1.1.2003wordpress

Node

themerex addonsMatch1.6.49.8wordpress

AND

themerex savejulia_personal_fundraising_campaignRange<1.0.3wordpress

Node

themerex addonsMatch1.6.49.6wordpress

AND

themerex bonkozoo_zooRange<1.0.3wordpress

Node

themerex addonsMatch1.6.49.6.2wordpress

AND

themerex renewal-plastic_surgeon_clinicRange<1.0.3wordpress

Node

themerex addonsMatch1.6.49.5wordpress

AND

themerex gloss_blogRange<1.0.1wordpress

Node

themerex addonsMatch1.6.58.2wordpress

AND

themerex plumbing-repair,_building_&_construction_wordpress_themeRange<3.0.1wordpress

Node

themerex addonsMatch1.6.61.2wordpress

AND

themerex topper_theme_and_skinsMatch-wordpress

Source	Link
wordfence	www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/

Parameter	Position	Path	Description	CWE
sc	query param	/wp-json/trx_addons/V2/get/sc_layout	Unauthenticated access to the WordPress REST API endpoint can execute PHP functions and possibly inject admin accounts via the sc parameter.	CWE-862, CWE-94
role	query param	/wp-json/trx_addons/V2/get/sc_layout	Unauthenticated access to the WordPress REST API endpoint can execute PHP functions and possibly inject admin accounts via the sc parameter.	CWE-862, CWE-94
user_login	query param	/wp-json/trx_addons/V2/get/sc_layout	Unauthenticated access to the WordPress REST API endpoint can execute PHP functions and possibly inject admin accounts via the sc parameter.	CWE-862, CWE-94
user_pass	query param	/wp-json/trx_addons/V2/get/sc_layout	Unauthenticated access to the WordPress REST API endpoint can execute PHP functions and possibly inject admin accounts via the sc parameter.	CWE-862, CWE-94

21 Nov 2024 04:55Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

CVSS 39.8

EPSS0.6663