PT-2023-11863 · Activello+1 · Activello+2

Jerome Bruandet · CVE-2020-36721 · Publicado 2023-06-07 · Atualizado 2023-06-16

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions The Brilliance versions prior to 1.2.8 Activello versions prior to 1.4.1 Newspaper X versions prior to 1.3.2

Description The issue is related to the lack of capability and security checks/nonces in the activello activate plugin and activello deactivate plugin functions, located in the inc/welcome-screen/class-activello-welcome.php file. This allows unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

Recommendations For The Brilliance version 1.2.7 and earlier, update to version 1.2.8 or later. For Activello version 1.4.0 and earlier, update to version 1.4.1 or later. For Newspaper X version 1.3.1 and earlier, update to version 1.3.2 or later.

Exploit

Correção

Missing Authorization

Improper Access Control

Enumeração de Fraquezas

CWE-862

CWE-284

Identificadores relacionados

CVE-2020-36721

Produtos afetados

Activello

Newspaper

The Brilliance

Referências · 7

• 🔥 https://blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes · Exploit
• https://wordpress.org/themes/newspaper-x · Nota
• https://wordpress.org/themes/activello · Nota
• https://osv.dev/vulnerability/CVE-2020-36721 · Aviso do Fabricante
• https://wordfence.com/threat-intel/vulnerabilities/id/a9e4e989-8e55-4ea7-8f42-9f67cfab1168?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-36721 · Nota de Segurança
• https://wordpress.org/themes/brilliance · Nota