Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2020-36708

Epsilon Framework Themes (Various Versions) - Function Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Wordfence

Description

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

machothemes Antreas

Default version status: unaffected

  • 0 to ≤ 1.0.2affected

machothemes NatureMag Lite

Default version status: unaffected

  • 0 to ≤ 1.0.4affected

silkalns Bonkers

Default version status: unaffected

  • 0 to ≤ 1.0.4affected

wpchill Affluent

Default version status: unaffected

  • 0 to ≤ 1.1.0affected

wpchill Transcend

Default version status: unaffected

  • 0 to ≤ 1.1.8affected

wpchill Allegiant

Default version status: unaffected

  • 0 to ≤ 1.2.2affected

machothemes MedZone Lite

Default version status: unaffected

  • 0 to ≤ 1.2.4affected

silkalns Shapely

Default version status: unaffected

  • 0 to ≤ 1.2.7affected

wpchill Brilliance

Default version status: unaffected

  • 0 to ≤ 1.2.7affected

silkalns Newspaper X

Default version status: unaffected

  • 0 to ≤ 1.3.1affected

silkalns Activello

Default version status: unaffected

  • 0 to ≤ 1.4.0affected

machothemes Regina Lite

Default version status: unaffected

  • 0 to ≤ 2.0.4affected

silkalns Pixova Lite

Default version status: unaffected

  • 0 to ≤ 2.0.5affected

silkalns Illdy

Default version status: unaffected

  • 0 to ≤ 2.1.4affected

machothemes NewsMag

Default version status: unaffected

  • 0 to ≤ 2.4.1affected

silkalns Sparkling

Default version status: unaffected

  • 0 to ≤ 2.4.8affected

References