Read the docs
TI-2020-18892 Aliases CVE-2020-36721GHSA-x6fw-c968-rf52

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

Priority LOW 37CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation. This is due to the 'activello_activate_plugin' and 'activello_deactivate_plugin' functions in the 'inc/welcome-screen/class-activello-welcome.php' file missing capability and security checks/nonces. This makes it possible for unauthenticated attackers to activate and deactivate arbitrary plugins installed on a vulnerable site.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00971 62nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
wpchillBrillianceup to 1.2.7—No fix listedCNA
colorlibpluginsNewspaper Xup to 1.3.1—No fix listedCNA
colorlibpluginsActivelloup to 1.4.0—No fix listedCNA
  • Brilliance Vendorwpchill Affected up to 1.2.7 Fixed in — No fix listed CNA
  • Newspaper X Vendorcolorlibplugins Affected up to 1.3.1 Fixed in — No fix listed CNA
  • Activello Vendorcolorlibplugins Affected up to 1.4.0 Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:*before 1.4.2Vulnerablecolorlibplugins
cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:*before 1.0.6Vulnerablecolorlibplugins
cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:*before 2.1.7Vulnerablecolorlibplugins
cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:*before 1.3.2Vulnerablecolorlibplugins
cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:*before 2.0.7Vulnerablecolorlibplugins
cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:*before 1.2.9Vulnerablecolorlibplugins
cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:*before 1.1.2VulnerableCpothemes
cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:*before 1.2.6VulnerableCpothemes
cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:*before 1.3.0VulnerableCpothemes
cpe:2.3:a:cpothemes:transcend:*:*:*:*:*:wordpress:*:*before 1.2.0VulnerableCpothemes
  • cpe:2.3:a:colorlib:activello:*:*:*:*:*:wordpress:*:* Versions before 1.4.2 Vulnerable ·colorlibplugins
  • cpe:2.3:a:colorlib:bonkers:*:*:*:*:*:wordpress:*:* Versions before 1.0.6 Vulnerable ·colorlibplugins
  • cpe:2.3:a:colorlib:illdy:*:*:*:*:*:wordpress:*:* Versions before 2.1.7 Vulnerable ·colorlibplugins
  • cpe:2.3:a:colorlib:newspaper_x:*:*:*:*:*:wordpress:*:* Versions before 1.3.2 Vulnerable ·colorlibplugins
  • cpe:2.3:a:colorlib:pixova_lite:*:*:*:*:*:wordpress:*:* Versions before 2.0.7 Vulnerable ·colorlibplugins
  • cpe:2.3:a:colorlib:shapely:*:*:*:*:*:wordpress:*:* Versions before 1.2.9 Vulnerable ·colorlibplugins
  • cpe:2.3:a:cpothemes:affluent:*:*:*:*:*:wordpress:*:* Versions before 1.1.2 Vulnerable ·Cpothemes
  • cpe:2.3:a:cpothemes:allegiant:*:*:*:*:*:wordpress:*:* Versions before 1.2.6 Vulnerable ·Cpothemes
  • cpe:2.3:a:cpothemes:brilliance:*:*:*:*:*:wordpress:*:* Versions before 1.3.0 Vulnerable ·Cpothemes
  • cpe:2.3:a:cpothemes:transcend:*:*:*:*:*:wordpress:*:* Versions before 1.2.0 Vulnerable ·Cpothemes
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:machothemes:antreas:*:*:*:*:*:wordpress:*:*before 1.0.7VulnerableMacho Themes
cpe:2.3:a:machothemes:medzone_lite:*:*:*:*:*:wordpress:*:*before 1.2.6VulnerableMacho Themes
cpe:2.3:a:machothemes:naturemag_lite:*:*:*:*:*:wordpress:*:*up to 1.0.4VulnerableMacho Themes
cpe:2.3:a:machothemes:newsmag:*:*:*:*:*:wordpress:*:*before 2.4.2VulnerableMacho Themes
cpe:2.3:a:machothemes:regina_lite:*:*:*:*:*:wordpress:*:*before 2.0.6VulnerableMacho Themes
  • cpe:2.3:a:machothemes:antreas:*:*:*:*:*:wordpress:*:* Versions before 1.0.7 Vulnerable ·Macho Themes
  • cpe:2.3:a:machothemes:medzone_lite:*:*:*:*:*:wordpress:*:* Versions before 1.2.6 Vulnerable ·Macho Themes
  • cpe:2.3:a:machothemes:naturemag_lite:*:*:*:*:*:wordpress:*:* Versions up to 1.0.4 Vulnerable ·Macho Themes
  • cpe:2.3:a:machothemes:newsmag:*:*:*:*:*:wordpress:*:* Versions before 2.4.2 Vulnerable ·Macho Themes
  • cpe:2.3:a:machothemes:regina_lite:*:*:*:*:*:wordpress:*:* Versions before 2.0.6 Vulnerable ·Macho Themes

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-36721
  2. 2026-10-03 Alias added: GHSA-x6fw-c968-rf52

References

Exploit 1

Advisory 1

Other 3

  • TI-2020-18879 Epsilon Framework Themes (Various Versions) - Function Injection CVSS 3.1CRITICAL 9.8
  • TI-2021-07068 Download Monitor < 4.4.5 - Admin+ SQL Injection CVSS 3.1HIGH 7.2
  • TI-2022-22320 WordPress Download Monitor Plugin <= 4.7.60 is vulnerable to Sensitive Data Exposure CVSS 3.1HIGH 7.5
  • TI-2024-03458 Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS CVSS 3.1MEDIUM 6.8
  • TI-2021-05950 WordPress Download Monitor plugin <= 4.4.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability CVSS 3.1MEDIUM 4.8
  • TI-2026-03090 Kali Forms <= 2.4.9 - Unauthenticated Remote Code Execution via form_process CVSS 3.1CRITICAL 9.8
See all 140 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences