CVE-2020-36708

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

9.8

CVSS

65.3%

EPSS (exploit prob.)

99th

EPSS percentile

2023-06-07

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
colorlib	activello	< 1.4.2
colorlib	bonkers	< 1.0.6
colorlib	illdy	< 2.1.7
colorlib	newspaper_x	< 1.3.2
colorlib	pixova_lite	< 2.0.7
colorlib	shapely	< 1.2.9
colorlib	sparklinkg	<= 2.4.8
cpothemes	affluent	< 1.1.2
cpothemes	allegiant	< 1.2.6
cpothemes	brilliance	< 1.3.0
cpothemes	transcend	< 1.2.0
machothemes	antreas	< 1.0.7
machothemes	medzone_lite	< 1.2.6
machothemes	naturemag_lite	<= 1.0.4
machothemes	newsmag	< 2.4.2
machothemes	regina_lite	< 2.0.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-36708