CVE-2020-10257
Critical
Description
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
SeverityCritical
CVSS9.8
Exploit probability—
ProductThemerex Addons
PublishedMar 10, 2020
First seenMar 10, 2020
How to fix
Update
- themerex ozeum-museum1.0.2 or later
- themerex chit_club-board_games1.0.1 or later
- themerex yottis-simple_portfolio1.0.1 or later
- themerex helion-agency_\&portfolio1.0.3 or later
- themerex amuli1.0.2 or later
- themerex nelson-barbershop_\+_tattoo_salon1.0.1.2001 or later
- themerex hallelujah-church1.0.1 or later
- themerex right_way4.0.1 or later
- themerex prider-pride_fest1.0.2 or later
- themerex mystik-esoterics1.0.1 or later
- themerex skydiving_and_flying_company1.0.1 or later
- themerex dronex-aerial_photography_services1.1.2001 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| themerex addons | 1.70.3, 1.6.67, 1.6.66, 1.6.65, 1.6.62.3, 1.6.62.1, 1.6.61.2, 1.6.61.3, 1.6.61.1, 1.6.61, 1.6.60, 1.6.59.3, 1.6.59.2, 1.6.59.1.1, 1.6.59, 1.6.58.2, 1.6.57.3, 1.6.57.4, 1.6.57.2, 1.6.57, 1.6.56, 1.6.55.4, 1.6.55.7, 1.6.55.3, 1.6.55.1, 1.6.54, 1.6.53.1, 1.6.53.3, 1.6.53.2, 1.6.52.2, 1.6.52.1, 1.6.53, 1.6.51.3, 1.6.51.1, 1.6.50, 1.6.50.1, 1.0.49.10, 1.6.49.8, 1.6.49.6, 1.6.49.6.2, 1.6.49.5 | — |
| themerex ozeum-museum | v < 1.0.2 | 1.0.2 |
| themerex chit_club-board_games | v < 1.0.1 | 1.0.1 |
| themerex yottis-simple_portfolio | v < 1.0.1 | 1.0.1 |
| themerex helion-agency_\&portfolio | v < 1.0.3 | 1.0.3 |
| themerex amuli | v < 1.0.2 | 1.0.2 |
| themerex nelson-barbershop_\+_tattoo_salon | v < 1.0.1.2001 | 1.0.1.2001 |
| themerex hallelujah-church | v < 1.0.1 | 1.0.1 |
| themerex right_way | v < 4.0.1 | 4.0.1 |
| themerex prider-pride_fest | v < 1.0.2 | 1.0.2 |
| themerex mystik-esoterics | v < 1.0.1 | 1.0.1 |
| themerex skydiving_and_flying_company | v < 1.0.1 | 1.0.1 |
| themerex dronex-aerial_photography_services | v < 1.1.2001 | 1.1.2001 |
| themerex samadhi-buddhist | v < 1.0.1 | 1.0.1 |
| themerex tantum-rent_a_car\,_rent_a_bike\,_rent_a_scooter_multiskin_theme | v < 1.0.2 | 1.0.2 |
| themerex scientia-public_library | v < 1.0.1 | 1.0.1 |
| themerex blabber | v < 1.5.2009 | 1.5.2009 |
| themerex impacto_patronus_multi-landing | v < 1.1.2001 | 1.1.2001 |
| themerex rare_radio | v < 1.0.1 | 1.0.1 |
| themerex piqes-creative_startup_\&_agency_wordpress_theme | v < 1.0.1 | 1.0.1 |
| themerex kratz-digital_agency | v < 1.0.2 | 1.0.2 |
| themerex pixefy | v < 1.0.1 | 1.0.1 |
| themerex netmix-broadband_\&_telecom | v < 1.0.2 | 1.0.2 |
| themerex kids_care | v < 3.0.5 | 3.0.5 |
| themerex briny-diving_wordpress_theme | v < 1.2.2000 | 1.2.2000 |
| themerex tornados | v < 1.1.2001 | 1.1.2001 |
| themerex gridiron | v < 1.0.2 | 1.0.2 |
| themerex yungen-digital\/marketing_agency | v < 1.0.1 | 1.0.1 |
| themerex fc_united-football | v < 1.0.7 | 1.0.7 |
| themerex bugster-pests_control | v < 1.0.2 | 1.0.2 |
| themerex rumble-single_fighter_boxer\,_news\,_gym\,_store | v < 1.0.4 | 1.0.4 |
| themerex tacticool-shooting_range_wordpress_theme | v < 1.0.1 | 1.0.1 |
| themerex coinpress-cryptocurrency_magazine_\&_blog_wordpress_theme | v < 1.0.2 | 1.0.2 |
| themerex vihara-ashram\,_buddhist | v < 1.1.2001 | 1.1.2001 |
| themerex katelyn-gutenberg_wordpress_blog_theme | v < 1.0.4 | 1.0.4 |
| themerex heaven_11-multiskin_property_theme | v < 1.0.2 | 1.0.2 |
| themerex especio-food_gutenberg_theme | v < 1.0.1 | 1.0.1 |
| themerex partiso_electioncampaign | v < 1.1.2002 | 1.1.2002 |
| themerex kargo-freight_transport | v < 1.1.2004 | 1.1.2004 |
| themerex maxify-startup_blog | v < 1.0.4 | 1.0.4 |
| themerex lingvico-language_learning_school | v < 1.0.3 | 1.0.3 |
| themerex aldo-gutenberg_wordpress_blog_theme | v < 1.0.2 | 1.0.2 |
| themerex vixus-startup_\/_mobile_application | v < 1.0.4 | 1.0.4 |
| themerex wellspring_water_filter_systems | v < 1.0.3 | 1.0.3 |
| themerex nazareth-church | v < 1.0.5 | 1.0.5 |
| themerex tediss-soft_play_area\,_cafe_\&_child_care_center | v < 1.0.3 | 1.0.3 |
| themerex yolox-startup_magazine_\&_blog_wordpress_theme | v < 1.0.3 | 1.0.3 |
| themerex meals_and_wheels-food_truck | v < 1.0.3 | 1.0.3 |
| themerex rosalinda-vegetarian_\&_health_coach | v < 1.0.3 | 1.0.3 |
| themerex vapester | v < 1.1.2001 | 1.1.2001 |
| themerex modern_housewife-housewife_and_family_blog | v < 1.0.2 | 1.0.2 |
| themerex chainpress | v < 1.0.3 | 1.0.3 |
| themerex justitia-multiskin_lawyer_theme | v < 1.0.3 | 1.0.3 |
| themerex hobo_digital_nomad_blog | v < 1.0.3 | 1.0.3 |
| themerex rhodos-creative_corporate_wordpress_theme | v < 1.3.2001 | 1.3.2001 |
| themerex buzz_stone-magazine_\&_blog | v < 1.0.3 | 1.0.3 |
| themerex corredo_sport_event | v < 1.1.2003 | 1.1.2003 |
| themerex savejulia_personal_fundraising_campaign | v < 1.0.3 | 1.0.3 |
| themerex bonkozoo_zoo | v < 1.0.3 | 1.0.3 |
| themerex renewal-plastic_surgeon_clinic | v < 1.0.3 | 1.0.3 |
| themerex gloss_blog | v < 1.0.1 | 1.0.1 |
| themerex plumbing-repair\,_building_\&_construction_wordpress_theme | v < 3.0.1 | 3.0.1 |
| themerex topper_theme_and_skins | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.