CVE-2020-36333

CRITICALNuclei

themegrill themegrill_demo_importer Missing Authentication for Critical Function

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2020-36333 has a selected CVSS score of 9.1 (critical); EIP currently links 1 Nuclei template.

Description

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Feb 16, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

themegrill_demo_importer

Browse themegrill / themegrill_demo_importer
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALThemeGrill Demo Importer < 1.6.2 - Database ResetCVSS 9.1

ThemeGrill Demo Importer before 1.6.2 does not require authentication for wiping the database due to a reset_wizard_actions hook. In versions 1.3.4 and above and versions 1.6.1 and below, there is a vulnerability that allows any unauthenticated user to wipe the entire database to its default state after which they are automatically logged in as an administrator.

Impact

Unauthenticated attackers can wipe the entire WordPress database to its default state and gain automatic administrator access, resulting in complete site takeover and data loss.

Remediation

Upgrade to ThemeGrill Demo Importer version 1.6.2 or later.

WeaknessesCWE-285
Authorsiamnoooob, pdresearch
Template tagscvecve2020wpwordpresswp-pluginthemegrillvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
FOFA: body="/plugins/themegrill-demo-importer"
https://www.openwall.com/lists/oss-security/2020/02/19/1 https://nvd.nist.gov/vuln/detail/CVE-2020-36333

Source: ProjectDiscovery

References

3