Login Request a demo
Critical severity · published Mar 10, 2020
CVE-2020-10257
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by…
9.8
CVSS
8.9%
EPSS
No
On KEV
Description
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.9% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Addons · Themerex
1.70.3; 1.70.3; 1.6.67; 1.6.66; 1.6.66; 1.6.65; +34 more · source: NVD
AW
Aldo-gutenberg Wordpress Blog Theme · Themerex
before 1.0.2 · source: NVD
AM
Amuli · Themerex
before 1.0.2 · source: NVD
BL
Blabber · Themerex
before 1.5.2009 · source: NVD
BZ
Bonkozoo Zoo · Themerex
before 1.0.3 · source: NVD
BW
Briny-diving Wordpress Theme · Themerex
before 1.2.2000 · source: NVD
BC
Bugster-pests Control · Themerex
before 1.0.2 · source: NVD
BS
Buzz Stone-magazine & Blog · Themerex
before 1.0.3 · source: NVD
CH
Chainpress · Themerex
before 1.0.3 · source: NVD
CC
Chit Club-board Games · Themerex
before 1.0.1 · source: NVD
CM
Coinpress-cryptocurrency Magazine & Blog Wordpress Theme · Themerex
before 1.0.2 · source: NVD
CS
Corredo Sport Event · Themerex
before 1.1.2003 · source: NVD
Affected product
AD
Addons
Themerex
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-10257
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-10257
Exploit
https://www.wordfence.com/blog/2020/03/zero-day-vulnerability-in-themerex-addons-now-patched/
More from Addons
9.8
CVE-2024-13448
The ThemeREX Addons plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'trx_addons_uploads_save_data' function in all versions…
8.8
CVE-2025-0682
The ThemeREX Addons plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.0 via the 'trx_sc_reviews' shortcode 'type' attribute
5.4
CVE-2025-6997
The ThemeREX Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.35.1.1 due to insufficient input…