themerex addons, themerex ozeum-museum, themerex chit club-board games +33 lainnya
CVSS 9.8 · Critical EPSS 8,9%
Kerentanan Improper Control of Generation of Code ('Code Injection') pada themerex addons, themerex ozeum-museum +34 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| themerex | addons | Versi 1.70.3 |
| themerex | ozeum-museum | Semua versi sebelum 1.0.2 |
| themerex | chit club-board games | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.67 |
| themerex | yottis-simple portfolio | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.66 |
| themerex | helion-agency &portfolio | Semua versi sebelum 1.0.3 |
| themerex | amuli | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.65 |
| themerex | nelson-barbershop + tattoo salon | Semua versi sebelum 1.0.1.2001 |
| themerex | hallelujah-church | Semua versi sebelum 1.0.1 |
| themerex | right way | Semua versi sebelum 4.0.1 |
| themerex | prider-pride fest | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.62.3 |
| themerex | mystik-esoterics | Semua versi sebelum 1.0.1 |
| themerex | skydiving and flying company | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.62.1 |
| themerex | dronex-aerial photography services | Semua versi sebelum 1.1.2001 |
| themerex | addons | Versi 1.6.61.2 |
| themerex | samadhi-buddhist | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.61.3 |
| themerex | tantum-rent a car, rent a bike, rent a scooter multiskin theme | Semua versi sebelum 1.0.2 |
| themerex | scientia-public library | Semua versi sebelum 1.0.1 |
| themerex | blabber | Semua versi sebelum 1.5.2009 |
| themerex | addons | Versi 1.6.61.1 |
| themerex | impacto patronus multi-landing | Semua versi sebelum 1.1.2001 |
| themerex | addons | Versi 1.6.61 |
| themerex | rare radio | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.60 |
| themerex | piqes-creative startup & agency wordpress theme | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.59.3 |
| themerex | kratz-digital agency | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.59.2 |
| themerex | pixefy | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.59.1.1 |
| themerex | netmix-broadband & telecom | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.59 |
| themerex | kids care | Semua versi sebelum 3.0.5 |
| themerex | addons | Versi 1.6.58.2 |
| themerex | briny-diving wordpress theme | Semua versi sebelum 1.2.2000 |
| themerex | addons | Versi 1.6.57.3 |
| themerex | tornados | Semua versi sebelum 1.1.2001 |
| themerex | addons | Versi 1.6.57.4 |
| themerex | gridiron | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.57.2 |
| themerex | yungen-digital/marketing agency | Semua versi sebelum 1.0.1 |
| themerex | fc united-football | Semua versi sebelum 1.0.7 |
| themerex | bugster-pests control | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.57 |
| themerex | rumble-single fighter boxer, news, gym, store | Semua versi sebelum 1.0.4 |
| themerex | addons | Versi 1.6.56 |
| themerex | tacticool-shooting range wordpress theme | Semua versi sebelum 1.0.1 |
| themerex | addons | Versi 1.6.55.4 |
| themerex | coinpress-cryptocurrency magazine & blog wordpress theme | Semua versi sebelum 1.0.2 |
| themerex | addons | Versi 1.6.55.7 |
| themerex | vihara-ashram, buddhist | Semua versi sebelum 1.1.2001 |
| themerex | addons | Versi 1.6.55.3 |
| themerex | katelyn-gutenberg wordpress blog theme | Semua versi sebelum 1.0.4 |
| themerex | addons | Versi 1.6.55.1 |
| themerex | heaven 11-multiskin property theme | Semua versi sebelum 1.0.2 |