CVE-2020-36708

CVE-2020-36708 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including b1g-b33f. A Nuclei detection template is also available.

AI-analyzed exploit summary This repository contains a functional exploit PoC for CVE-2020-36708, a function injection vulnerability in the WordPress Epsilon Framework. The script leverages the `epsilon_framework_ajax_action` AJAX endpoint to invoke arbitrary PHP class methods, demonstrating SSRF via the `Requests` library.

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.