Lucene search

WordfenceCVE-2020-36721

HistoryJun 07, 2023 - 2:15 a.m.

CVE-2020-36721

2023-06-0702:15:12

CWE-862

Wordfence

web.nvd.nist.gov

cve-2020-36721

wordpress

vulnerability

plugin activation

plugin deactivation

security issue

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the ‘activello_activate_plugin’ and ‘activello_deactivate_plugin’ functions in the ‘inc/welcome-screen/class-activello-welcome.php’ file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

Affected configurations

Nvd

Vulners

Node

colorlibactivelloRange<1.4.2wordpress

colorlibbonkersRange<1.0.6wordpress

colorlibilldyRange<2.1.7wordpress

colorlibnewspaper_xRange<1.3.2wordpress

colorlibpixova_liteRange<2.0.7wordpress

colorlibshapelyRange<1.2.9wordpress

cpothemesaffluentRange<1.1.2wordpress

cpothemesallegiantRange<1.2.6wordpress

cpothemesbrillianceRange<1.3.0wordpress

cpothemestranscendRange<1.2.0wordpress

machothemesantreasRange<1.0.7wordpress

machothemesmedzone_liteRange<1.2.6wordpress

machothemesnaturemag_liteRange≤1.0.4wordpress

machothemesnewsmagRange<2.4.2wordpress

machothemesregina_liteRange<2.0.6wordpress

VendorProductVersionCPE
colorlibactivello*cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:*
colorlibbonkers*cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:*
colorlibilldy*cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:*
colorlibnewspaper_x*cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:*
colorlibpixova_lite*cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:*
colorlibshapely*cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:*
cpothemesaffluent*cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:*
cpothemesallegiant*cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:*
cpothemesbrilliance*cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:*
cpothemestranscend*cpe:2.3:a:cpothemes:transcend:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
colorlib	activello	*	cpe:2.3:a:colorlib:activello::::::wordpress::*
colorlib	bonkers	*	cpe:2.3:a:colorlib:bonkers::::::wordpress::*
colorlib	illdy	*	cpe:2.3:a:colorlib:illdy::::::wordpress::*
colorlib	newspaper_x	*	cpe:2.3:a:colorlib:newspaper_x::::::wordpress::*
colorlib	pixova_lite	*	cpe:2.3:a:colorlib:pixova_lite::::::wordpress::*
colorlib	shapely	*	cpe:2.3:a:colorlib:shapely::::::wordpress::*
cpothemes	affluent	*	cpe:2.3:a:cpothemes:affluent::::::wordpress::*
cpothemes	allegiant	*	cpe:2.3:a:cpothemes:allegiant::::::wordpress::*
cpothemes	brilliance	*	cpe:2.3:a:cpothemes:brilliance::::::wordpress::*
cpothemes	transcend	*	cpe:2.3:a:cpothemes:transcend::::::wordpress::*

Rows per page:

1-10 of 151

CNA Affected

[
  {
    "vendor": "silkalns",
    "product": "Newspaper X",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.3.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "wpchill",
    "product": "Brilliance",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.2.7",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "silkalns",
    "product": "Activello",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "1.4.0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/

wordpress.org/themes/activello/

wordpress.org/themes/brilliance/

wordpress.org/themes/newspaper-x/

www.wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

56.8%

JSON

Related for CVE-2020-36721