Lucene search

[email protected]NVD:CVE-2020-36708

HistoryJun 07, 2023 - 2:15 a.m.

CVE-2020-36708

2023-06-0702:15:11

CWE-94

[email protected]

web.nvd.nist.gov

wordpress

function injection

vulnerability

remote code execution

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.039

Percentile

92.2%

JSON

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

Affected configurations

Nvd

Node

colorlibactivelloRange<1.4.2wordpress

colorlibbonkersRange<1.0.6wordpress

colorlibilldyRange<2.1.7wordpress

colorlibnewspaper_xRange<1.3.2wordpress

colorlibpixova_liteRange<2.0.7wordpress

colorlibshapelyRange<1.2.9wordpress

colorlibsparklinkgRange≤2.4.8wordpress

cpothemesaffluentRange<1.1.2wordpress

cpothemesallegiantRange<1.2.6wordpress

cpothemesbrillianceRange<1.3.0wordpress

cpothemestranscendRange<1.2.0wordpress

machothemesantreasRange<1.0.7wordpress

machothemesmedzone_liteRange<1.2.6wordpress

machothemesnaturemag_liteRange≤1.0.4wordpress

machothemesnewsmagRange<2.4.2wordpress

machothemesregina_liteRange<2.0.6wordpress

VendorProductVersionCPE
colorlibactivello*cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:*
colorlibbonkers*cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:*
colorlibilldy*cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:*
colorlibnewspaper_x*cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:*
colorlibpixova_lite*cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:*
colorlibshapely*cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:*
colorlibsparklinkg*cpe:2.3:a:colorlib:sparklinkg:*:*:*:*:*:wordpress:*:*
cpothemesaffluent*cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:*
cpothemesallegiant*cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:*
cpothemesbrilliance*cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
colorlib	activello	*	cpe:2.3:a:colorlib:activello::::::wordpress::*
colorlib	bonkers	*	cpe:2.3:a:colorlib:bonkers::::::wordpress::*
colorlib	illdy	*	cpe:2.3:a:colorlib:illdy::::::wordpress::*
colorlib	newspaper_x	*	cpe:2.3:a:colorlib:newspaper_x::::::wordpress::*
colorlib	pixova_lite	*	cpe:2.3:a:colorlib:pixova_lite::::::wordpress::*
colorlib	shapely	*	cpe:2.3:a:colorlib:shapely::::::wordpress::*
colorlib	sparklinkg	*	cpe:2.3:a:colorlib:sparklinkg::::::wordpress::*
cpothemes	affluent	*	cpe:2.3:a:cpothemes:affluent::::::wordpress::*
cpothemes	allegiant	*	cpe:2.3:a:cpothemes:allegiant::::::wordpress::*
cpothemes	brilliance	*	cpe:2.3:a:cpothemes:brilliance::::::wordpress::*

Rows per page:

1-10 of 161

References

blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/

blog.nintechnet.com/unauthenticated-function-injection-vulnerability-in-wordpress-sparkling-theme/

wpscan.com/vulnerability/bec52a5b-c892-4763-a962-05da7100eca5

www.wordfence.com/blog/2020/11/large-scale-attacks-target-epsilon-framework-themes/

www.wordfence.com/threat-intel/vulnerabilities/id/5b75c322-539d-44e9-8f26-5ff929874b67?source=cve

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.9

Confidence

High

EPSS

0.039

Percentile

92.2%

JSON

Related for NVD:CVE-2020-36708

cve1 prion1 cvelist1