PT-2024-10847 · WordPress · Themegrill-Demo-Importer

Dave Jong · Published 2024-10-15 · Updated 2024-10-21 · CVE-2020-36837

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThemeGrill Demo Importer plugin for WordPress versions 1.3.4 through 1.6.1

Description The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset wizard actions function. This makes it possible for authenticated attackers to reset the WordPress database. If there is a user named 'admin', the attacker will become automatically logged in as an administrator.

Recommendations For versions 1.3.4 through 1.6.1, update to the latest version immediately to mitigate risks. As a temporary workaround, consider restricting access to the reset wizard actions function until a patch is available. Avoid using the plugin until the issue is resolved.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-36837

Affected Products

Themegrill-Demo-Importer

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2020-36837 · Security Note
• https://twitter.com/CveFindCom/status/1846446889249472667 · Twitter Post
• https://wordfence.com/threat-intel/vulnerabilities/id/8c0dc694-854e-4f96-8c2d-7251c41a3ee9?source=cve · Note
• https://twitter.com/cracbot/status/1848242883951988761 · Twitter Post
• https://twitter.com/transilienceai/status/1847688234798645337 · Twitter Post
• https://twitter.com/transilienceai/status/1847688266868232604 · Twitter Post
• https://twitter.com/transilienceai/status/1847688227324309914 · Twitter Post
• https://twitter.com/transilienceai/status/1847688272832536655 · Twitter Post
• https://twitter.com/transilienceai/status/1847688260392264184 · Twitter Post
• https://raw.githubusercontent.com/themegrill/themegrill-demo-importer/master/CHANGELOG.txt · Note
• https://webarxsecurity.com/critical-issue-in-themegrill-demo-importer · Note
• https://openwall.com/lists/oss-security/2020/02/19/1 · Note
• https://twitter.com/transilienceai/status/1847688240754479544 · Twitter Post
• https://twitter.com/CVEnew/status/1846444820606107803 · Twitter Post