CVE-2020-36719 ListingPro - WordPress Directory & Listing Theme < 2.6.1 - Arbitrary Plugin Installation, Activation and Deactivation
Unauthenticated attackers can install, activate, or deactivate arbitrary plugins due to missing capability checks in the ListingPro WordPress theme.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-36719?
CVE-2020-36719 is a critical missing authorization vulnerability in ListingPro - WordPress Directory & Listing Theme, published on 7 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ListingPro - WordPress Directory & Listing Theme for WordPress is vulnerable to Arbitrary Plugin Installation, Activation and Deactivation in versions before 2.6.1. This is due to a missing capability check on the lp_cc_addons_actions function. This makes it possible for unauthenticated attackers to arbitrarily install, activate and deactivate any plugin.
Weakness: CWE-862
Which versions are affected by CVE-2020-36719?
It affects 1 product.
Products include Cridio Listingpro.
How do I fix CVE-2020-36719?
No fix has been published for CVE-2020-36719 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2020-36719 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-36719 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in ListingPro - WordPress Directory & Listing Theme
- CVE-2024-38795 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated SQL Injection vulnerability
- CVE-2024-39622 WordPress ListingPro theme <= 2.9.4 - Unauthenticated SQL Injection vulnerability
- CVE-2024-39619 WordPress ListingPro plugin <= 2.9.4 - Unauthenticated Local File Inclusion vulnerability
- CVE-2024-39623 WordPress ListingPro theme <= 2.9.4 - Cross Site Request Forgery (CSRF) to Account Takeover vulnerability
- CVE-2024-39620 WordPress ListingPro plugin <= 2.9.4 - SQL Injection vulnerability
Sources
Also known as GHSA-vpf4-7pch-f7ph.