CVE-2020-36719

CRITICALNuclei

ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2020-36719 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lp_cc_addons_actions function. This makes it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 17, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 26, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

listingpro

Browse cridio / listingpro
VulnCheckVersion data not supplied

ListingPro - WordPress Directory & Listing Theme

Default status: unaffected

CVE ListBefore 2.6.1affected

Nuclei templates

1
ProjectDiscoveryCRITICALListingPro < 2.6.1 - Arbitrary Plugin Installation/Activation/DeactivationCVSS 9.8

The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lp_cc_addons_actions function. This makes it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin.

Impact

Unauthenticated attackers can arbitrarily install, activate or deactivate plugins, potentially installing malicious plugins to gain complete site control.

Remediation

Upgrade to ListingPro version 2.6.1 or later.

WeaknessesCWE-862
Authorsritikchaddha
Template tagscvecve2020wpwp-pluginwordpresslistingpropassivevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:cridio:listingpro:*:*:*:*:*:wordpress:*:*
FOFA: body="/wp-content/plugins/listingpro"
https://blog.nintechnet.com/wordpress-listingpro-theme-fixed-a-critical-vulnerability/ https://nvd.nist.gov/vuln/detail/CVE-2020-36719

Source: ProjectDiscovery

References

4