Lucene search

WordfenceCVE-2020-36708

HistoryJun 07, 2023 - 2:15 a.m.

CVE-2020-36708

2023-06-0702:15:11

CWE-94

Wordfence

web.nvd.nist.gov

cve-2020-36708

wordpress

function injections

shapely

newsmag

activello

illdy

allegiant

newspaper x

pixova lite

brilliance

medzone lite

regina lite

transcend

affluent

bonkers

antreas

sparkling

naturemag lite

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.039

Percentile

92.2%

JSON

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

Affected configurations

Nvd

Vulners

Node

colorlibactivelloRange<1.4.2wordpress

colorlibbonkersRange<1.0.6wordpress

colorlibilldyRange<2.1.7wordpress

colorlibnewspaper_xRange<1.3.2wordpress

colorlibpixova_liteRange<2.0.7wordpress

colorlibshapelyRange<1.2.9wordpress

colorlibsparklinkgRange≤2.4.8wordpress

cpothemesaffluentRange<1.1.2wordpress

cpothemesallegiantRange<1.2.6wordpress

cpothemesbrillianceRange<1.3.0wordpress

cpothemestranscendRange<1.2.0wordpress

machothemesantreasRange<1.0.7wordpress

machothemesmedzone_liteRange<1.2.6wordpress

machothemesnaturemag_liteRange≤1.0.4wordpress

machothemesnewsmagRange<2.4.2wordpress

machothemesregina_liteRange<2.0.6wordpress

VendorProductVersionCPE
colorlibactivello*cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:*
colorlibbonkers*cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:*
colorlibilldy*cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:*
colorlibnewspaper_x*cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:*
colorlibpixova_lite*cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:*
colorlibshapely*cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:*
colorlibsparklinkg*cpe:2.3:a:colorlib:sparklinkg:*:*:*:*:*:wordpress:*:*
cpothemesaffluent*cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:*
cpothemesallegiant*cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:*
cpothemesbrilliance*cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
colorlib	activello	*	cpe:2.3:a:colorlib:activello::::::wordpress::*
colorlib	bonkers	*	cpe:2.3:a:colorlib:bonkers::::::wordpress::*
colorlib	illdy	*	cpe:2.3:a:colorlib:illdy::::::wordpress::*
colorlib	newspaper_x	*	cpe:2.3:a:colorlib:newspaper_x::::::wordpress::*
colorlib	pixova_lite	*	cpe:2.3:a:colorlib:pixova_lite::::::wordpress::*
colorlib	shapely	*	cpe:2.3:a:colorlib:shapely::::::wordpress::*
colorlib	sparklinkg	*	cpe:2.3:a:colorlib:sparklinkg::::::wordpress::*
cpothemes	affluent	*	cpe:2.3:a:cpothemes:affluent::::::wordpress::*
cpothemes	allegiant	*	cpe:2.3:a:cpothemes:allegiant::::::wordpress::*
cpothemes	brilliance	*	cpe:2.3:a:cpothemes:brilliance::::::wordpress::*

Rows per page:

1-10 of 161

CNA Affected

[
  {
    "vendor": "wpchill",
    "product": "Allegiant",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "machothemes",
    "product": "NatureMag Lite",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.0.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "machothemes",
    "product": "NewsMag",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.4.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Shapely",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Bonkers",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.0.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "machothemes",
    "product": "Regina Lite",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.0.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "wpchill",
    "product": "Transcend",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.1.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Sparkling",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.4.8",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Newspaper X",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.3.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "machothemes",
    "product": "Antreas",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.0.2",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "wpchill",
    "product": "Affluent",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.1.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "wpchill",
    "product": "Brilliance",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Activello",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.4.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Illdy",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.1.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "machothemes",
    "product": "MedZone Lite",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Pixova Lite",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "2.0.5",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/

blog.nintechnet.com/unauthenticated-function-injection-vulnerability-in-wordpress-sparkling-theme/

wpscan.com/vulnerability/bec52a5b-c892-4763-a962-05da7100eca5

www.wordfence.com/blog/2020/11/large-scale-attacks-target-epsilon-framework-themes/

www.wordfence.com/threat-intel/vulnerabilities/id/5b75c322-539d-44e9-8f26-5ff929874b67?source=cve

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.039

Percentile

92.2%

JSON

Related for CVE-2020-36708