CVE-2020-10257
PoC —CVSS 3.1
9.8 critical
EPSS
9%p95
Published
()
Modified
Description
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
- Vendors
- themerex
- Products
- addons, ozeum-museum, chit club-board games, yottis-simple portfolio, helion-agency \&portfolio, amuli, nelson-barbershop \+ tattoo salon, hallelujah-church, right way, prider-pride fest, mystik-esoterics, skydiving and flying company
- Ecosystems
- WordPress
- Weakness
- CWE-94, CWE-862
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.