CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-10257

The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.013

EPSS Ranking 79.2%

CVSS Severity

CVSS v3 Score 9.8

CVSS v2 Score 7.5

References

Products affected by CVE-2020-10257

None » None » Version:

_buddhist:-
None » None » Version:

_building_&_construction_wordpress_theme:-
None » None » Version:

_cafe_&_child_care_center:-
None » None » Version:

_gym
None » None » Version:

_news
None » None » Version:

_rent_a_bike
None » None » Version:

_rent_a_scooter_multiskin_theme:-
None » None » Version:

_store:-
Themerex » Addons » Version: 1.0.49.10

cpe:2.3:a:themerex:addons:1.0.49.10
Themerex » Addons » Version: 1.6.49.5

cpe:2.3:a:themerex:addons:1.6.49.5
Themerex » Addons » Version: 1.6.49.6

cpe:2.3:a:themerex:addons:1.6.49.6
Themerex » Addons » Version: 1.6.49.6.2

cpe:2.3:a:themerex:addons:1.6.49.6.2
Themerex » Addons » Version: 1.6.49.8

cpe:2.3:a:themerex:addons:1.6.49.8
Themerex » Addons » Version: 1.6.50

cpe:2.3:a:themerex:addons:1.6.50
Themerex » Addons » Version: 1.6.50.1

cpe:2.3:a:themerex:addons:1.6.50.1
Themerex » Addons » Version: 1.6.51.1

cpe:2.3:a:themerex:addons:1.6.51.1
Themerex » Addons » Version: 1.6.51.3

cpe:2.3:a:themerex:addons:1.6.51.3
Themerex » Addons » Version: 1.6.52.1

cpe:2.3:a:themerex:addons:1.6.52.1
Themerex » Addons » Version: 1.6.52.2

cpe:2.3:a:themerex:addons:1.6.52.2
Themerex » Addons » Version: 1.6.53

cpe:2.3:a:themerex:addons:1.6.53
Themerex » Addons » Version: 1.6.53.1

cpe:2.3:a:themerex:addons:1.6.53.1
Themerex » Addons » Version: 1.6.53.2

cpe:2.3:a:themerex:addons:1.6.53.2
Themerex » Addons » Version: 1.6.53.3

cpe:2.3:a:themerex:addons:1.6.53.3
Themerex » Addons » Version: 1.6.54

cpe:2.3:a:themerex:addons:1.6.54
Themerex » Addons » Version: 1.6.55.1

cpe:2.3:a:themerex:addons:1.6.55.1
Themerex » Addons » Version: 1.6.55.3

cpe:2.3:a:themerex:addons:1.6.55.3
Themerex » Addons » Version: 1.6.55.4

cpe:2.3:a:themerex:addons:1.6.55.4
Themerex » Addons » Version: 1.6.55.7

cpe:2.3:a:themerex:addons:1.6.55.7
Themerex » Addons » Version: 1.6.56

cpe:2.3:a:themerex:addons:1.6.56
Themerex » Addons » Version: 1.6.57

cpe:2.3:a:themerex:addons:1.6.57
Themerex » Addons » Version: 1.6.57.2

cpe:2.3:a:themerex:addons:1.6.57.2
Themerex » Addons » Version: 1.6.57.3

cpe:2.3:a:themerex:addons:1.6.57.3
Themerex » Addons » Version: 1.6.57.4

cpe:2.3:a:themerex:addons:1.6.57.4
Themerex » Addons » Version: 1.6.58.2

cpe:2.3:a:themerex:addons:1.6.58.2
Themerex » Addons » Version: 1.6.59

cpe:2.3:a:themerex:addons:1.6.59
Themerex » Addons » Version: 1.6.59.1.1

cpe:2.3:a:themerex:addons:1.6.59.1.1
Themerex » Addons » Version: 1.6.59.2

cpe:2.3:a:themerex:addons:1.6.59.2
Themerex » Addons » Version: 1.6.59.3

cpe:2.3:a:themerex:addons:1.6.59.3
Themerex » Addons » Version: 1.6.60

cpe:2.3:a:themerex:addons:1.6.60
Themerex » Addons » Version: 1.6.61

cpe:2.3:a:themerex:addons:1.6.61
Themerex » Addons » Version: 1.6.61.1

cpe:2.3:a:themerex:addons:1.6.61.1
Themerex » Addons » Version: 1.6.61.2

cpe:2.3:a:themerex:addons:1.6.61.2
Themerex » Addons » Version: 1.6.61.3

cpe:2.3:a:themerex:addons:1.6.61.3
Themerex » Addons » Version: 1.6.62.1

cpe:2.3:a:themerex:addons:1.6.62.1
Themerex » Addons » Version: 1.6.62.3

cpe:2.3:a:themerex:addons:1.6.62.3
Themerex » Addons » Version: 1.6.65

cpe:2.3:a:themerex:addons:1.6.65
Themerex » Addons » Version: 1.6.66

cpe:2.3:a:themerex:addons:1.6.66
Themerex » Addons » Version: 1.6.67

cpe:2.3:a:themerex:addons:1.6.67
Themerex » Addons » Version: 1.70.3

cpe:2.3:a:themerex:addons:1.70.3
Themerex » Aldo-Gutenberg Wordpress Blog Theme » Version: N/A

cpe:2.3:a:themerex:aldo-gutenberg_wordpress_blog_theme:-
Themerex » Amuli » Version: N/A

cpe:2.3:a:themerex:amuli:-
Themerex » Blabber » Version: N/A

cpe:2.3:a:themerex:blabber:-
Themerex » Bonkozoo Zoo » Version: N/A

cpe:2.3:a:themerex:bonkozoo_zoo:-
Themerex » Briny-Diving Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:briny-diving_wordpress_theme:-
Themerex » Bugster-Pests Control » Version: N/A

cpe:2.3:a:themerex:bugster-pests_control:-
Themerex » Buzz Stone-Magazine & Blog » Version: N/A

cpe:2.3:a:themerex:buzz_stone-magazine_&_blog:-
Themerex » Chainpress » Version: N/A

cpe:2.3:a:themerex:chainpress:-
Themerex » Chit Club-Board Games » Version: N/A

cpe:2.3:a:themerex:chit_club-board_games:-
Themerex » Coinpress-Cryptocurrency Magazine & Blog Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:coinpress-cryptocurrency_magazine_&_blog_wordpress_theme:-
Themerex » Corredo Sport Event » Version: N/A

cpe:2.3:a:themerex:corredo_sport_event:-
Themerex » Dronex-Aerial Photography Services » Version: N/A

cpe:2.3:a:themerex:dronex-aerial_photography_services:-
Themerex » Especio-Food Gutenberg Theme » Version: N/A

cpe:2.3:a:themerex:especio-food_gutenberg_theme:-
Themerex » Fc United-Football » Version: N/A

cpe:2.3:a:themerex:fc_united-football:-
Themerex » Gloss Blog » Version: N/A

cpe:2.3:a:themerex:gloss_blog:-
Themerex » Gridiron » Version: N/A

cpe:2.3:a:themerex:gridiron:-
Themerex » Hallelujah-Church » Version: N/A

cpe:2.3:a:themerex:hallelujah-church:-
Themerex » Heaven 11-Multiskin Property Theme » Version: N/A

cpe:2.3:a:themerex:heaven_11-multiskin_property_theme:-
Themerex » Helion-Agency &portfolio » Version: N/A

cpe:2.3:a:themerex:helion-agency_&portfolio:-
Themerex » Hobo Digital Nomad Blog » Version: N/A

cpe:2.3:a:themerex:hobo_digital_nomad_blog:-
Themerex » Impacto Patronus Multi-Landing » Version: N/A

cpe:2.3:a:themerex:impacto_patronus_multi-landing:-
Themerex » Justitia-Multiskin Lawyer Theme » Version: N/A

cpe:2.3:a:themerex:justitia-multiskin_lawyer_theme:-
Themerex » Kargo-Freight Transport » Version: N/A

cpe:2.3:a:themerex:kargo-freight_transport:-
Themerex » Katelyn-Gutenberg Wordpress Blog Theme » Version: N/A

cpe:2.3:a:themerex:katelyn-gutenberg_wordpress_blog_theme:-
Themerex » Kids Care » Version: N/A

cpe:2.3:a:themerex:kids_care:-
Themerex » Kratz-Digital Agency » Version: N/A

cpe:2.3:a:themerex:kratz-digital_agency:-
Themerex » Lingvico-Language Learning School » Version: N/A

cpe:2.3:a:themerex:lingvico-language_learning_school:-
Themerex » Maxify-Startup Blog » Version: N/A

cpe:2.3:a:themerex:maxify-startup_blog:-
Themerex » Meals And Wheels-Food Truck » Version: N/A

cpe:2.3:a:themerex:meals_and_wheels-food_truck:-
Themerex » Modern Housewife-Housewife And Family Blog » Version: N/A

cpe:2.3:a:themerex:modern_housewife-housewife_and_family_blog:-
Themerex » Mystik-Esoterics » Version: N/A

cpe:2.3:a:themerex:mystik-esoterics:-
Themerex » Nazareth-Church » Version: N/A

cpe:2.3:a:themerex:nazareth-church:-
Themerex » Nelson-Barbershop + Tattoo Salon » Version: N/A

cpe:2.3:a:themerex:nelson-barbershop_+_tattoo_salon:-
Themerex » Netmix-Broadband & Telecom » Version: N/A

cpe:2.3:a:themerex:netmix-broadband_&_telecom:-
Themerex » Ozeum-Museum » Version: N/A

cpe:2.3:a:themerex:ozeum-museum:-
Themerex » Partiso Electioncampaign » Version: N/A

cpe:2.3:a:themerex:partiso_electioncampaign:-
Themerex » Piqes-Creative Startup & Agency Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:piqes-creative_startup_&_agency_wordpress_theme:-
Themerex » Pixefy » Version: N/A

cpe:2.3:a:themerex:pixefy:-
Themerex » Plumbing-Repair » Version: Any

cpe:2.3:a:themerex:plumbing-repair
Themerex » Prider-Pride Fest » Version: N/A

cpe:2.3:a:themerex:prider-pride_fest:-
Themerex » Rare Radio » Version: N/A

cpe:2.3:a:themerex:rare_radio:-
Themerex » Renewal-Plastic Surgeon Clinic » Version: N/A

cpe:2.3:a:themerex:renewal-plastic_surgeon_clinic:-
Themerex » Rhodos-Creative Corporate Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:rhodos-creative_corporate_wordpress_theme:-
Themerex » Right Way » Version: N/A

cpe:2.3:a:themerex:right_way:-
Themerex » Rosalinda-Vegetarian & Health Coach » Version: N/A

cpe:2.3:a:themerex:rosalinda-vegetarian_&_health_coach:-
Themerex » Rumble-Single Fighter Boxer » Version: Any

cpe:2.3:a:themerex:rumble-single_fighter_boxer
Themerex » Samadhi-Buddhist » Version: N/A

cpe:2.3:a:themerex:samadhi-buddhist:-
Themerex » Savejulia Personal Fundraising Campaign » Version: N/A

cpe:2.3:a:themerex:savejulia_personal_fundraising_campaign:-
Themerex » Scientia-Public Library » Version: N/A

cpe:2.3:a:themerex:scientia-public_library:-
Themerex » Skydiving And Flying Company » Version: N/A

cpe:2.3:a:themerex:skydiving_and_flying_company:-
Themerex » Tacticool-Shooting Range Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:tacticool-shooting_range_wordpress_theme:-
Themerex » Tantum-Rent A Car » Version: Any

cpe:2.3:a:themerex:tantum-rent_a_car
Themerex » Tediss-Soft Play Area » Version: Any

cpe:2.3:a:themerex:tediss-soft_play_area
Themerex » Topper Theme And Skins » Version: N/A

cpe:2.3:a:themerex:topper_theme_and_skins:-
Themerex » Tornados » Version: N/A

cpe:2.3:a:themerex:tornados:-
Themerex » Vapester » Version: N/A

cpe:2.3:a:themerex:vapester:-
Themerex » Vihara-Ashram » Version: Any

cpe:2.3:a:themerex:vihara-ashram
Themerex » Vixus-Startup / Mobile Application » Version: N/A

cpe:2.3:a:themerex:vixus-startup_/_mobile_application:-
Themerex » Wellspring Water Filter Systems » Version: N/A

cpe:2.3:a:themerex:wellspring_water_filter_systems:-
Themerex » Yolox-Startup Magazine & Blog Wordpress Theme » Version: N/A

cpe:2.3:a:themerex:yolox-startup_magazine_&_blog_wordpress_theme:-
Themerex » Yottis-Simple Portfolio » Version: N/A

cpe:2.3:a:themerex:yottis-simple_portfolio:-
Themerex » Yungen-Digital/marketing Agency » Version: N/A

cpe:2.3:a:themerex:yungen-digital/marketing_agency:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-10257

Products

Pricing

Contact Us