Critical · published March 9, 2020
🚨 An open gateway for trouble! The ThemeREX Addons plugin for WordPress has a REST API endpoint that's as inviting as a front door without locks — allowing any user to execute PHP functions freely! 🔥 Think of the /trx_addons/v2/get/sc_layout endpoint as a restaurant kitchen where anyone can waltz in and start cooking — without any checks to keep the chefs in line. This vulnerability lets unauthorized users whip up a whole menu of malicious code without breaking a sweat! This flaw could lead to devastating consequences — anyone could gain control over your site, executing arbitrary PHP functions that could alter content, steal sensitive data, or even take down your entire site! The potential for chaos is immense, and your users' trust could be lost in a heartbeat.
Think of the /trx_addons/v2/get/sc_layout endpoint as a restaurant kitchen where anyone can waltz in and start cooking — without any checks to keep the chefs in line. This vulnerability lets unauthorized users whip up a whole menu of malicious code without breaking a sweat! The vulnerability lies in the lack of access control for the /trx_addons/v2/get/sc_layout REST API endpoint, which allows any user to send an unsafe 'sc' parameter to execute PHP functions, bypassing security measures that should be in place.
This flaw could lead to devastating consequences — anyone could gain control over your site, executing arbitrary PHP functions that could alter content, steal sensitive data, or even take down your entire site! The potential for chaos is immense, and your users' trust could be lost in a heartbeat. Patch your ThemeREX Addons plugin to version 2020-03-09 or later immediately! Additionally, review your REST API permissions and implement access control to ensure that only authorized users can access critical endpoints. Don't delay—your website's security is at stake! You can tackle this! By following these steps, you'll not only protect your site but also earn your Security Hero badge! 🛡️