CVE-2020-10257

The ThemeREX Addons plugin for WordPress, in versions prior to 2020-03-09 , contains an access control vulnerability in the /trx_addons/v2/get/sc_layout REST API endpoint. This flaw exists because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout using an unsafe sc parameter , allo...