CVE-2020-36708

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
machothemesAntreas<= 1.0.2
machothemesNatureMag Lite<= 1.0.4
silkalnsBonkers<= 1.0.4
wpchillAffluent<= 1.1.0
wpchillTranscend<= 1.1.8
wpchillAllegiant<= 1.2.2
machothemesMedZone Lite<= 1.2.4
silkalnsShapely<= 1.2.7
wpchillBrilliance<= 1.2.7
silkalnsNewspaper X<= 1.3.1
silkalnsActivello<= 1.4.0
machothemesRegina Lite<= 2.0.4
silkalnsPixova Lite<= 2.0.5
silkalnsIlldy<= 2.1.4
machothemesNewsMag<= 2.4.1
silkalnsSparkling<= 2.4.8

References

Timeline

Published
Jun 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-367094.8The Page Builder: KingComposer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via via shortcode in versions before 2.9.4 CVE-2020-36719.8Use-after-free issue could occur due to dangling pointer when generating a frame buffer in OpenGL ES in Snapdragon Compute, Snapdragon ConsuCVE-2020-367107.5The WPS Hide Login plugin for WordPress is vulnerable to login page disclosure even when the settings of the plugin are set to hide the logiCVE-2020-367115.4The Avada theme for WordPress is vulnerable to Stored Cross-Site Scripting via the update_layout function in versions up to, and including, CVE-2020-367125.3The Kali Forms plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 2.1.1. This iCVE-2020-367139.8The MStore API plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.1.5. This is due to unrestricCVE-2020-367148.1The Brizy plugin for WordPress is vulnerable to authorization bypass due to a incorrect capability check on the is_administrator() function CVE-2020-367154.6The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in vCVE-2020-367167.3The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setup_page function CVE-2020-367178.8The Kali Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.1.1. This is due to incoCVE-2020-367189.8The GDPR CCPA Compliance Support plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.3 via deseriCVE-2020-367199.8The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivati
CVE-2020-36708: Critical severity, CVSS 9.8 | Vulnix