The ThemeREX Addons plugin prior to 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
themerex addons 1.70.3 |
||
themerex ozeum-museum |
||
themerex chit club-board games |
||
themerex addons 1.6.67 |
||
themerex yottis-simple portfolio |
||
themerex addons 1.6.66 |
||
themerex helion-agency \\&portfolio |
||
themerex amuli |
||
themerex addons 1.6.65 |
||
themerex nelson-barbershop \\+ tattoo salon |
||
themerex hallelujah-church |
||
themerex right way |
||
themerex prider-pride fest |
||
themerex addons 1.6.62.3 |
||
themerex mystik-esoterics |
||
themerex skydiving and flying company |
||
themerex addons 1.6.62.1 |
||
themerex dronex-aerial photography services |
||
themerex addons 1.6.61.2 |
||
themerex samadhi-buddhist |
||
themerex addons 1.6.61.3 |
||
themerex tantum-rent a car\\, rent a bike\\, rent a scooter multiskin theme |
||
themerex scientia-public library |
||
themerex blabber |
||
themerex addons 1.6.61.1 |
||
themerex impacto patronus multi-landing |
||
themerex addons 1.6.61 |
||
themerex rare radio |
||
themerex addons 1.6.60 |
||
themerex piqes-creative startup \\& agency wordpress theme |
||
themerex addons 1.6.59.3 |
||
themerex kratz-digital agency |
||
themerex addons 1.6.59.2 |
||
themerex pixefy |
||
themerex addons 1.6.59.1.1 |
||
themerex netmix-broadband \\& telecom |
||
themerex addons 1.6.59 |
||
themerex kids care |
||
themerex addons 1.6.58.2 |
||
themerex briny-diving wordpress theme |
||
themerex addons 1.6.57.3 |
||
themerex tornados |
||
themerex addons 1.6.57.4 |
||
themerex gridiron |
||
themerex addons 1.6.57.2 |
||
themerex yungen-digital\\/marketing agency |
||
themerex fc united-football |
||
themerex bugster-pests control |
||
themerex addons 1.6.57 |
||
themerex rumble-single fighter boxer\\, news\\, gym\\, store |
||
themerex addons 1.6.56 |
||
themerex tacticool-shooting range wordpress theme |
||
themerex addons 1.6.55.4 |
||
themerex coinpress-cryptocurrency magazine \\& blog wordpress theme |
||
themerex addons 1.6.55.7 |
||
themerex vihara-ashram\\, buddhist |
||
themerex addons 1.6.55.3 |
||
themerex katelyn-gutenberg wordpress blog theme |
||
themerex addons 1.6.55.1 |
||
themerex heaven 11-multiskin property theme |
||
themerex addons 1.6.54 |
||
themerex especio-food gutenberg theme |
||
themerex addons 1.6.53.1 |
||
themerex partiso electioncampaign |
||
themerex addons 1.6.53.3 |
||
themerex kargo-freight transport |
||
themerex addons 1.6.53.2 |
||
themerex maxify-startup blog |
||
themerex lingvico-language learning school |
||
themerex aldo-gutenberg wordpress blog theme |
||
themerex addons 1.6.52.2 |
||
themerex vixus-startup \\/ mobile application |
||
themerex addons 1.6.52.1 |
||
themerex wellspring water filter systems |
||
themerex nazareth-church |
||
themerex addons 1.6.53 |
||
themerex tediss-soft play area\\, cafe \\& child care center |
||
themerex addons 1.6.51.3 |
||
themerex yolox-startup magazine \\& blog wordpress theme |
||
themerex meals and wheels-food truck |
||
themerex addons 1.6.51.1 |
||
themerex rosalinda-vegetarian \\& health coach |
||
themerex addons 1.6.50 |
||
themerex vapester |
||
themerex modern housewife-housewife and family blog |
||
themerex addons 1.6.50.1 |
||
themerex chainpress |
||
themerex justitia-multiskin lawyer theme |
||
themerex hobo digital nomad blog |
||
themerex rhodos-creative corporate wordpress theme |
||
themerex buzz stone-magazine \\& blog |
||
themerex addons 1.0.49.10 |
||
themerex corredo sport event |
||
themerex addons 1.6.49.8 |
||
themerex savejulia personal fundraising campaign |
||
themerex addons 1.6.49.6 |
||
themerex bonkozoo zoo |
||
themerex addons 1.6.49.6.2 |
||
themerex renewal-plastic surgeon clinic |
||
themerex addons 1.6.49.5 |
||
themerex gloss blog |
||
themerex plumbing-repair\\, building \\& construction wordpress theme |
||
themerex topper theme and skins - |
Vulmon