https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 06:28:14 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-16635 cnvd-2020-16635 https://cve.radiocsirt.org/vuln/cnvd-2020-16635 https://cve.radiocsirt.org/vuln/euvd-2026-39718 EUVD-2026-39718 https://cve.radiocsirt.org/vuln/euvd-2026-39718 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10257 <p>The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.</p> <p>The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10257 https://cve.radiocsirt.org/vuln/ghsa-x679-h3r8-6399 <p>The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.</p> <p>The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because includes/plugin.rest-api.php calls trx_addons_rest_get_sc_layout with an unsafe sc parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-x679-h3r8-6399 https://cve.radiocsirt.org/vuln/gsd-2020-10257 gsd-2020-10257 https://cve.radiocsirt.org/vuln/gsd-2020-10257