The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| machothemes | Antreas | ≤ 1.0.2 | |
| machothemes | MedZone Lite | ≤ 1.2.4 | |
| machothemes | NatureMag Lite | ≤ 1.0.4 | |
| machothemes | NewsMag | ≤ 2.4.1 | |
| machothemes | Regina Lite | ≤ 2.0.4 | |
| silkalns | Activello | ≤ 1.4.0 | |
| silkalns | Bonkers | ≤ 1.0.4 | |
| silkalns | Illdy | ≤ 2.1.4 | |
| silkalns | Newspaper X | ≤ 1.3.1 | |
| silkalns | Pixova Lite | ≤ 2.0.5 | |
| silkalns | Shapely | ≤ 1.2.7 | |
| silkalns | Sparkling | ≤ 2.4.8 | |
| wpchill | Affluent | ≤ 1.1.0 | |
| wpchill | Allegiant | ≤ 1.2.2 | |
| wpchill | Brilliance | ≤ 1.2.7 | |
| wpchill | Transcend | ≤ 1.1.8 |
Ücretsiz ve açık kaynak honeypot sensörümüz, sunucunuzun kullanmadığı portlarda bekler; bağlanan tarayıcıları ve saldırganları ortak kara listeye bildirir.
