Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2020-36719 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Critical flaw in ListingPro Theme (< v2.6.1). 📉 **Consequences**: Unauthenticated attackers can install, activate, or deactivate ANY WordPress plugin. Total server compromise risk! 💥

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: Missing capability check (CWE-862). 🐛 **Flaw**: The `lp_cc_addons_actions` function lacks proper authorization validation. No permission gate! 🚪🚫

Q3Who is affected? (Versions/Components)

🎯 **Affected**: WordPress Theme: ListingPro - Directory & Listing. 📦 **Version**: All versions **before 2.6.1**. ✅ **Fixed**: v2.6.1+.

Q4What can hackers do? (Privileges/Data)

🕵️ **Hackers Can**: Install malicious plugins. ⚡ Activate them for immediate execution. 🗑️ Deactivate security plugins. 📂 **Data**: Full read/write access via plugin code execution!

Q5Is exploitation threshold high? (Auth/Config)

🔓 **Threshold**: VERY LOW. 🚫 **Auth**: None required (Unauthenticated). ⚙️ **Config**: Default settings vulnerable. Anyone can exploit it! 🏃‍♂️💨

Q6Is there a public Exp? (PoC/Wild Exploitation)

🔍 **Public Exp?**: YES. 📜 **PoC**: Available via Nuclei templates (ProjectDiscovery). 🌐 **Wild Exploitation**: High risk due to ease of use. 📈

Q7How to self-check? (Features/Scanning)

🔎 **Self-Check**: Scan for ListingPro theme version. 🧪 **Tool**: Use Nuclei template `CVE-2020-36719.yaml`. 📊 **Feature**: Check if `lp_cc_addons_actions` is exposed without auth.

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Official Fix**: YES. 📥 **Patch**: Update ListingPro Theme to **version 2.6.1 or later**. 🔄 **Action**: Immediate update required! ✅

Q9What if no patch? (Workaround)

🚧 **No Patch?**: Disable the theme temporarily. 🛑 **Mitigation**: Block access to `lp_cc_addons_actions` via WAF rules. 🛡️ **Workaround**: Restrict file permissions.

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: CRITICAL. 🚨 **Priority**: P0 - Fix Immediately! ⏳ **Reason**: Unauthenticated RCE potential via plugin installation. Don't wait! ⏰