WordPress CVEs

Description

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

Affected WordPress components

• Activello Theme · activello
  Confirmed match Active
  Up to and including 1.4.0; Before 1.4.2
  View on WordPress.org
• Affluent Theme · affluent
  Confirmed match Abandoned
  Before 1.1.2
  View on WordPress.org
• Allegiant Theme · allegiant
  Confirmed match Abandoned
  Before 1.2.6
  View on WordPress.org
• Antreas Theme · antreas
  Confirmed match Abandoned
  Before 1.0.7
  View on WordPress.org
• Bonkers Theme · bonkers
  Confirmed match Active
  Before 1.0.6
  View on WordPress.org
• brilliance Theme · brilliance
  Confirmed match Homeless
  Up to and including 1.2.7; Before 1.3.0
  View on WordPress.org
• Illdy Theme · illdy
  Confirmed match Active
  Before 2.1.7
  View on WordPress.org
• NewsMag Theme · newsmag
  Confirmed match Abandoned
  Before 2.4.2
  View on WordPress.org
• Shapely Theme · shapely
  Confirmed match Active
  Before 1.2.9
  View on WordPress.org
• Transcend Theme · transcend
  Confirmed match Abandoned
  Before 1.2.0
  View on WordPress.org
• Newspaper X Theme · newspaper-x
  Possible match Active
  Up to and including 1.3.1
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• wpchill Brilliance — Up to and including 1.2.7
• silkalns Newspaper X — Up to and including 1.3.1
• silkalns Activello — Up to and including 1.4.0
• colorlib activello — Before 1.4.2
• colorlib bonkers — Before 1.0.6
• colorlib illdy — Before 2.1.7
• colorlib newspaper_x — Before 1.3.2
• colorlib pixova_lite — Before 2.0.7
• colorlib shapely — Before 1.2.9
• cpothemes affluent — Before 1.1.2
• cpothemes allegiant — Before 1.2.6
• cpothemes brilliance — Before 1.3.0
• cpothemes transcend — Before 1.2.0
• machothemes antreas — Before 1.0.7
• machothemes medzone_lite — Before 1.2.6
• machothemes naturemag_lite — Up to and including 1.0.4
• machothemes newsmag — Before 2.4.2
• machothemes regina_lite — Before 2.0.6

References

• blog.nintechnet.com https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ Exploit, Third Party Advisory
• wordpress.org https://wordpress.org/themes/activello/ Product
• wordpress.org https://wordpress.org/themes/brilliance/ Product
• wordpress.org https://wordpress.org/themes/newspaper-x/ Product
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve Third Party Advisory
• nvd.nist.gov Official NVD record