Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Themerex Subscribe
Filtered by product Addons
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-10257 1 Themerex 63 Addons, Aldo-gutenberg Wordpress Blog Theme, Amuli and 60 more 2021-07-21 7.5 HIGH 9.8 CRITICAL
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.