The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.
References
| Link | Resource |
|---|---|
| https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ | Exploit Third Party Advisory |
| https://wordpress.org/themes/activello/ | Product |
| https://wordpress.org/themes/brilliance/ | Product |
| https://wordpress.org/themes/newspaper-x/ | Product |
| https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jun 2023, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:* cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:* cpe:2.3:a:machothemes:antreas:*:*:*:*:*:wordpress:*:* cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:* cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:* cpe:2.3:a:machothemes:medzone_lite:*:*:*:*:*:wordpress:*:* cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:* cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:* cpe:2.3:a:cpothemes:transcend:*:*:*:*:*:wordpress:*:* cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:* cpe:2.3:a:machothemes:regina_lite:*:*:*:*:*:wordpress:*:* cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:* cpe:2.3:a:machothemes:newsmag:*:*:*:*:*:wordpress:*:* cpe:2.3:a:machothemes:naturemag_lite:*:*:*:*:*:wordpress:*:* cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:* |
|
| First Time |
Colorlib bonkers
Machothemes Colorlib illdy Cpothemes transcend Machothemes medzone Lite Colorlib pixova Lite Cpothemes affluent Machothemes regina Lite Machothemes antreas Machothemes newsmag Colorlib activello Cpothemes Colorlib newspaper X Colorlib shapely Colorlib Cpothemes allegiant Cpothemes brilliance Machothemes naturemag Lite |
|
| CWE | CWE-862 | |
| References | (MISC) https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ - Exploit, Third Party Advisory | |
| References | (MISC) https://wordpress.org/themes/brilliance/ - Product | |
| References | (MISC) https://wordpress.org/themes/activello/ - Product | |
| References | (MISC) https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve - Third Party Advisory | |
| References | (MISC) https://wordpress.org/themes/newspaper-x/ - Product | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
07 Jun 2023, 02:45
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-07 02:15
Updated : 2023-12-10 15:01
NVD link : CVE-2020-36721
Mitre link : CVE-2020-36721
CVE.ORG link : CVE-2020-36721
JSON object : View
Products Affected
machothemes
- medzone_lite
- newsmag
- regina_lite
- antreas
- naturemag_lite
colorlib
- newspaper_x
- bonkers
- shapely
- activello
- illdy
- pixova_lite
cpothemes
- allegiant
- brilliance
- transcend
- affluent
CWE
CWE-862
Missing Authorization