漏洞描述
The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.
影响产品
themerexpartiso_electioncampaign查看产品 →themerexhallelujah-church查看产品 →themerexaddons查看产品 →themerexespecio-food_gutenberg_theme查看产品 →themerexblabber查看产品 →themerexkatelyn-gutenberg_wordpress_blog_theme查看产品 →themerexcoinpress-cryptocurrency_magazine_\&_blog_wordpress_theme查看产品 →themerexpiqes-creative_startup_\&_agency_wordpress_theme查看产品 →themerextediss-soft_play_area\,_cafe_\&_child_care_center查看产品 →themerexpixefy查看产品 →themerexprider-pride_fest查看产品 →themerexchit_club-board_games查看产品 →themerextacticool-shooting_range_wordpress_theme查看产品 →themerexrumble-single_fighter_boxer\,_news\,_gym\,_store查看产品 →themerexmystik-esoterics查看产品 →themerexscientia-public_library查看产品 →themerexgloss_blog查看产品 →themerexrare_radio查看产品 →themerexbuzz_stone-magazine_\&_blog查看产品 →themerexskydiving_and_flying_company查看产品 →themerexamuli查看产品 →themerexrhodos-creative_corporate_wordpress_theme查看产品 →themerexjustitia-multiskin_lawyer_theme查看产品 →themerexmeals_and_wheels-food_truck查看产品 →themerexgridiron查看产品 →themerexbugster-pests_control查看产品 →themerexnazareth-church查看产品 →themerexvapester查看产品 →themerexwellspring_water_filter_systems查看产品 →themerexkratz-digital_agency查看产品 →themerexcorredo_sport_event查看产品 →themerexrosalinda-vegetarian_\&_health_coach查看产品 →themerextantum-rent_a_car\,_rent_a_bike\,_rent_a_scooter_multiskin_theme查看产品 →themerexfc_united-football查看产品 →themerexvixus-startup_\/_mobile_application查看产品 →themerexmaxify-startup_blog查看产品 →themerexright_way查看产品 →themerexchainpress查看产品 →themerexplumbing-repair\,_building_\&_construction_wordpress_theme查看产品 →themerexyungen-digital\/marketing_agency查看产品 →themerexmodern_housewife-housewife_and_family_blog查看产品 →themerexbonkozoo_zoo查看产品 →themerexhobo_digital_nomad_blog查看产品 →themerexkids_care查看产品 →themerexbriny-diving_wordpress_theme查看产品 →themerexsamadhi-buddhist查看产品 →themerexozeum-museum查看产品 →themerexhelion-agency_\&portfolio查看产品 →themerexnetmix-broadband_\&_telecom查看产品 →themerexnelson-barbershop_\+_tattoo_salon查看产品 →themerexvihara-ashram\,_buddhist查看产品 →themerexsavejulia_personal_fundraising_campaign查看产品 →themerextopper_theme_and_skins查看产品 →themereximpacto_patronus_multi-landing查看产品 →themerexdronex-aerial_photography_services查看产品 →themerexyolox-startup_magazine_\&_blog_wordpress_theme查看产品 →themerexaldo-gutenberg_wordpress_blog_theme查看产品 →themerexkargo-freight_transport查看产品 →themerexrenewal-plastic_surgeon_clinic查看产品 →themerexyottis-simple_portfolio查看产品 →themerexheaven_11-multiskin_property_theme查看产品 →themerextornados查看产品 →themerexlingvico-language_learning_school查看产品 →
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。