WordPress CVEs

Description

The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.

Affected products and versions

• n/a n/a — Versions not specified
• themerex addons — Version 1.70.3
• themerex ozeum-museum — Before 1.0.2
• themerex chit_club-board_games — Before 1.0.1
• themerex addons — Version 1.6.67
• themerex yottis-simple_portfolio — Before 1.0.1
• themerex addons — Version 1.6.66
• themerex helion-agency_\&portfolio — Before 1.0.3
• themerex amuli — Before 1.0.2
• themerex addons — Version 1.6.65
• themerex nelson-barbershop_\+_tattoo_salon — Before 1.0.1.2001
• themerex hallelujah-church — Before 1.0.1
• themerex right_way — Before 4.0.1
• themerex prider-pride_fest — Before 1.0.2
• themerex addons — Version 1.6.62.3
• themerex mystik-esoterics — Before 1.0.1
• themerex skydiving_and_flying_company — Before 1.0.1
• themerex addons — Version 1.6.62.1
• themerex dronex-aerial_photography_services — Before 1.1.2001
• themerex addons — Version 1.6.61.2
• themerex samadhi-buddhist — Before 1.0.1
• themerex addons — Version 1.6.61.3
• themerex tantum-rent_a_car\,_rent_a_bike\,_rent_a_scooter_multiskin_theme — Before 1.0.2
• themerex scientia-public_library — Before 1.0.1
• themerex blabber — Before 1.5.2009
• themerex addons — Version 1.6.61.1
• themerex impacto_patronus_multi-landing — Before 1.1.2001
• themerex addons — Version 1.6.61
• themerex rare_radio — Before 1.0.1
• themerex addons — Version 1.6.60
• themerex piqes-creative_startup_\&_agency_wordpress_theme — Before 1.0.1
• themerex addons — Version 1.6.59.3
• themerex kratz-digital_agency — Before 1.0.2
• themerex addons — Version 1.6.59.2
• themerex pixefy — Before 1.0.1
• themerex addons — Version 1.6.59.1.1
• themerex netmix-broadband_\&_telecom — Before 1.0.2
• themerex addons — Version 1.6.59
• themerex kids_care — Before 3.0.5
• themerex addons — Version 1.6.58.2
• themerex briny-diving_wordpress_theme — Before 1.2.2000
• themerex addons — Version 1.6.57.3
• themerex tornados — Before 1.1.2001
• themerex addons — Version 1.6.57.4
• themerex gridiron — Before 1.0.2
• themerex addons — Version 1.6.57.2
• themerex yungen-digital\/marketing_agency — Before 1.0.1
• themerex fc_united-football — Before 1.0.7
• themerex bugster-pests_control — Before 1.0.2
• themerex addons — Version 1.6.57
• themerex rumble-single_fighter_boxer\,_news\,_gym\,_store — Before 1.0.4
• themerex addons — Version 1.6.56
• themerex tacticool-shooting_range_wordpress_theme — Before 1.0.1
• themerex addons — Version 1.6.55.4
• themerex coinpress-cryptocurrency_magazine_\&_blog_wordpress_theme — Before 1.0.2
• themerex addons — Version 1.6.55.7
• themerex vihara-ashram\,_buddhist — Before 1.1.2001
• themerex addons — Version 1.6.55.3
• themerex katelyn-gutenberg_wordpress_blog_theme — Before 1.0.4
• themerex addons — Version 1.6.55.1
• themerex heaven_11-multiskin_property_theme — Before 1.0.2
• themerex addons — Version 1.6.54
• themerex especio-food_gutenberg_theme — Before 1.0.1
• themerex addons — Version 1.6.53.1
• themerex partiso_electioncampaign — Before 1.1.2002
• themerex addons — Version 1.6.53.3
• themerex kargo-freight_transport — Before 1.1.2004
• themerex addons — Version 1.6.53.2
• themerex maxify-startup_blog — Before 1.0.4
• themerex lingvico-language_learning_school — Before 1.0.3
• themerex aldo-gutenberg_wordpress_blog_theme — Before 1.0.2
• themerex addons — Version 1.6.52.2
• themerex vixus-startup_\/_mobile_application — Before 1.0.4
• themerex addons — Version 1.6.52.1
• themerex wellspring_water_filter_systems — Before 1.0.3
• themerex nazareth-church — Before 1.0.5
• themerex addons — Version 1.6.53
• themerex tediss-soft_play_area\,_cafe_\&_child_care_center — Before 1.0.3
• themerex addons — Version 1.6.51.3
• themerex yolox-startup_magazine_\&_blog_wordpress_theme — Before 1.0.3
• themerex meals_and_wheels-food_truck — Before 1.0.3
• themerex addons — Version 1.6.51.1
• themerex rosalinda-vegetarian_\&_health_coach — Before 1.0.3
• themerex addons — Version 1.6.50
• themerex vapester — Before 1.1.2001
• themerex modern_housewife-housewife_and_family_blog — Before 1.0.2
• themerex addons — Version 1.6.50.1
• themerex chainpress — Before 1.0.3
• themerex justitia-multiskin_lawyer_theme — Before 1.0.3
• themerex hobo_digital_nomad_blog — Before 1.0.3
• themerex rhodos-creative_corporate_wordpress_theme — Before 1.3.2001
• themerex buzz_stone-magazine_\&_blog — Before 1.0.3
• themerex addons — Version 1.0.49.10
• themerex corredo_sport_event — Before 1.1.2003
• themerex addons — Version 1.6.49.8
• themerex savejulia_personal_fundraising_campaign — Before 1.0.3
• themerex addons — Version 1.6.49.6
• themerex bonkozoo_zoo — Before 1.0.3
• themerex addons — Version 1.6.49.6.2
• themerex renewal-plastic_surgeon_clinic — Before 1.0.3
• themerex addons — Version 1.6.49.5
• themerex gloss_blog — Before 1.0.1
• themerex plumbing-repair\,_building_\&_construction_wordpress_theme — Before 3.0.1
• themerex topper_theme_and_skins — Versions not specified

References

• www.wordfence.com https://www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/ Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record