CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25142

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.3%

CVSS Severity

CVSS v3 Score 8.8

References

Products affected by CVE-2019-25142

Extendthemes » Materialis » Version: N/A

cpe:2.3:a:extendthemes:materialis:-
Extendthemes » Materialis » Version: 0.9.29

cpe:2.3:a:extendthemes:materialis:0.9.29
Extendthemes » Materialis » Version: 1.0.10

cpe:2.3:a:extendthemes:materialis:1.0.10
Extendthemes » Materialis » Version: 1.0.100

cpe:2.3:a:extendthemes:materialis:1.0.100
Extendthemes » Materialis » Version: 1.0.102

cpe:2.3:a:extendthemes:materialis:1.0.102
Extendthemes » Materialis » Version: 1.0.103

cpe:2.3:a:extendthemes:materialis:1.0.103
Extendthemes » Materialis » Version: 1.0.104

cpe:2.3:a:extendthemes:materialis:1.0.104
Extendthemes » Materialis » Version: 1.0.105

cpe:2.3:a:extendthemes:materialis:1.0.105
Extendthemes » Materialis » Version: 1.0.13

cpe:2.3:a:extendthemes:materialis:1.0.13
Extendthemes » Materialis » Version: 1.0.163

cpe:2.3:a:extendthemes:materialis:1.0.163
Extendthemes » Materialis » Version: 1.0.164

cpe:2.3:a:extendthemes:materialis:1.0.164
Extendthemes » Materialis » Version: 1.0.167

cpe:2.3:a:extendthemes:materialis:1.0.167
Extendthemes » Materialis » Version: 1.0.168

cpe:2.3:a:extendthemes:materialis:1.0.168
Extendthemes » Materialis » Version: 1.0.171

cpe:2.3:a:extendthemes:materialis:1.0.171
Extendthemes » Materialis » Version: 1.0.172

cpe:2.3:a:extendthemes:materialis:1.0.172
Extendthemes » Materialis » Version: 1.0.5

cpe:2.3:a:extendthemes:materialis:1.0.5
Extendthemes » Materialis » Version: 1.0.6

cpe:2.3:a:extendthemes:materialis:1.0.6
Extendthemes » Materialis » Version: 1.0.7

cpe:2.3:a:extendthemes:materialis:1.0.7
Extendthemes » Materialis » Version: 1.0.8

cpe:2.3:a:extendthemes:materialis:1.0.8
Extendthemes » Materialis » Version: 1.0.9

cpe:2.3:a:extendthemes:materialis:1.0.9
Extendthemes » Materialis » Version: 1.0.96

cpe:2.3:a:extendthemes:materialis:1.0.96
Extendthemes » Materialis » Version: 1.0.98

cpe:2.3:a:extendthemes:materialis:1.0.98
Extendthemes » Materialis » Version: 1.0.99

cpe:2.3:a:extendthemes:materialis:1.0.99
Extendthemes » Mesmerize » Version: 0.1

cpe:2.3:a:extendthemes:mesmerize:0.1
Extendthemes » Mesmerize » Version: 0.9.1

cpe:2.3:a:extendthemes:mesmerize:0.9.1
Extendthemes » Mesmerize » Version: 0.9.10

cpe:2.3:a:extendthemes:mesmerize:0.9.10
Extendthemes » Mesmerize » Version: 0.9.11

cpe:2.3:a:extendthemes:mesmerize:0.9.11
Extendthemes » Mesmerize » Version: 0.9.2

cpe:2.3:a:extendthemes:mesmerize:0.9.2
Extendthemes » Mesmerize » Version: 0.9.4

cpe:2.3:a:extendthemes:mesmerize:0.9.4
Extendthemes » Mesmerize » Version: 0.9.5

cpe:2.3:a:extendthemes:mesmerize:0.9.5
Extendthemes » Mesmerize » Version: 0.9.6

cpe:2.3:a:extendthemes:mesmerize:0.9.6
Extendthemes » Mesmerize » Version: 0.9.7

cpe:2.3:a:extendthemes:mesmerize:0.9.7
Extendthemes » Mesmerize » Version: 0.9.8

cpe:2.3:a:extendthemes:mesmerize:0.9.8
Extendthemes » Mesmerize » Version: 0.9.9

cpe:2.3:a:extendthemes:mesmerize:0.9.9
Extendthemes » Mesmerize » Version: 1.0.65

cpe:2.3:a:extendthemes:mesmerize:1.0.65
Extendthemes » Mesmerize » Version: 1.0.66

cpe:2.3:a:extendthemes:mesmerize:1.0.66
Extendthemes » Mesmerize » Version: 1.0.72

cpe:2.3:a:extendthemes:mesmerize:1.0.72
Extendthemes » Mesmerize » Version: 1.0.73

cpe:2.3:a:extendthemes:mesmerize:1.0.73
Extendthemes » Mesmerize » Version: 1.0.86

cpe:2.3:a:extendthemes:mesmerize:1.0.86
Extendthemes » Mesmerize » Version: 1.0.90

cpe:2.3:a:extendthemes:mesmerize:1.0.90
Extendthemes » Mesmerize » Version: 1.1.0

cpe:2.3:a:extendthemes:mesmerize:1.1.0
Extendthemes » Mesmerize » Version: 1.1.1

cpe:2.3:a:extendthemes:mesmerize:1.1.1
Extendthemes » Mesmerize » Version: 1.1.2

cpe:2.3:a:extendthemes:mesmerize:1.1.2
Extendthemes » Mesmerize » Version: 1.1.3

cpe:2.3:a:extendthemes:mesmerize:1.1.3
Extendthemes » Mesmerize » Version: 1.1.4

cpe:2.3:a:extendthemes:mesmerize:1.1.4
Extendthemes » Mesmerize » Version: 1.2

cpe:2.3:a:extendthemes:mesmerize:1.2
Extendthemes » Mesmerize » Version: 1.2.1

cpe:2.3:a:extendthemes:mesmerize:1.2.1
Extendthemes » Mesmerize » Version: 1.2.2

cpe:2.3:a:extendthemes:mesmerize:1.2.2
Extendthemes » Mesmerize » Version: 1.5.42

cpe:2.3:a:extendthemes:mesmerize:1.5.42
Extendthemes » Mesmerize » Version: 1.5.45

cpe:2.3:a:extendthemes:mesmerize:1.5.45
Extendthemes » Mesmerize » Version: 1.5.50

cpe:2.3:a:extendthemes:mesmerize:1.5.50
Extendthemes » Mesmerize » Version: 1.5.52

cpe:2.3:a:extendthemes:mesmerize:1.5.52
Extendthemes » Mesmerize » Version: 1.6.59

cpe:2.3:a:extendthemes:mesmerize:1.6.59
Extendthemes » Mesmerize » Version: 1.6.61

cpe:2.3:a:extendthemes:mesmerize:1.6.61
Extendthemes » Mesmerize » Version: 1.6.62

cpe:2.3:a:extendthemes:mesmerize:1.6.62
Extendthemes » Mesmerize » Version: 1.6.72

cpe:2.3:a:extendthemes:mesmerize:1.6.72
Extendthemes » Mesmerize » Version: 1.6.77

cpe:2.3:a:extendthemes:mesmerize:1.6.77
Extendthemes » Mesmerize » Version: 1.6.81

cpe:2.3:a:extendthemes:mesmerize:1.6.81
Extendthemes » Mesmerize » Version: 1.6.82

cpe:2.3:a:extendthemes:mesmerize:1.6.82
Extendthemes » Mesmerize » Version: 1.6.85

cpe:2.3:a:extendthemes:mesmerize:1.6.85
Extendthemes » Mesmerize » Version: 1.6.88

cpe:2.3:a:extendthemes:mesmerize:1.6.88
Extendthemes » Mesmerize » Version: 1.6.89

cpe:2.3:a:extendthemes:mesmerize:1.6.89

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-25142

Products

Pricing

Contact Us