CVE:CVE-2020-36721
CNNVD:CNNVD-202306-488
WordPress和WordPress plugin都是WordPress基金会的产品。WordPress是一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress plugin是一个应用插件。
WordPress Plugin Brilliance 1.2.7 版本及之前版本, Activello 1.4.0 版本及之前版本，和 Newspaper X 1.3.1 版本及之前版本 存在安全漏洞，该漏洞源于 inc/welcome-screen/class-activello-welcome.php 文件中的 activello_activate_plugin 和 activello_deactivate_plugin 函数缺少功能和安全检查/随机数。
solution:Upgrade colorlib activello to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade colorlib bonkers to a higher version than 1.0.6,and avoid the version (,1.0.6); Upgrade colorlib illdy to a higher version than 2.1.7,and avoid the version (,2.1.7); Upgrade colorlib newspaper_x to a higher version than 1.3.2,and avoid the version (,1.3.2); Upgrade colorlib pixova_lite to a higher version than 2.0.7,and avoid the version (,2.0.7); Upgrade colorlib shapely to a higher version than 1.2.9,and avoid the version (,1.2.9); Upgrade cpothemes affluent to a higher version than 1.1.2,and avoid the version (,1.1.2); Upgrade cpothemes allegiant to a higher version than 1.2.6,and avoid the version (,1.2.6); Upgrade cpothemes brilliance to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade cpothemes transcend to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade machothemes antreas to a higher version than 1.0.7,and avoid the version (,1.0.7); Upgrade machothemes medzone_lite to a higher version than 1.2.6,and avoid the version (,1.2.6); Upgrade machothemes naturemag_lite to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade machothemes newsmag to a higher version than 2.4.2,and avoid the version (,2.4.2); Upgrade machothemes regina_lite to a higher version than 2.0.6,and avoid the version (,2.0.6)