critical9.8
CVE-2020-10257
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functio…
Impact
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Themerex | Addons | Versions 1.70.3, 1.6.67, 1.6.66, 1.6.65, 1.6.62.3, 1.6.62.1 |
| Themerex | Ozeum-Museum | before 1.0.2 |
| Themerex | Chit Club-Board Games | before 1.0.1 |
| Themerex | Yottis-Simple Portfolio | before 1.0.1 |
| Themerex | Helion-Agency \&Portfolio | before 1.0.3 |
| Themerex | Amuli | before 1.0.2 |
| Themerex | Nelson-Barbershop \+ Tattoo Salon | before 1.0.1.2001 |
| Themerex | Hallelujah-Church | before 1.0.1 |
| Themerex | Right Way | before 4.0.1 |
| Themerex | Prider-Pride Fest | before 1.0.2 |
| Themerex | Mystik-Esoterics | before 1.0.1 |
| Themerex | Skydiving And Flying Company | before 1.0.1 |