CVE-2020-36708: colorlib activello Code Injection
Vulnerability summary
CVE-2020-36708 is a critical (CVSS 9.8) Code Injection vulnerability in colorlib activello. EPSS estimates a 65.34% chance of exploitation in the next 30 days, higher than 99.2% of scored vulnerabilities. 2 public exploits are recorded. Fixed in 1.4.2.
Timeline
- 07-06-2023PublishedVulnerability first disclosed.
- 08-04-2026Last modifiedVulnerability information updated.
Description
The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, Pixova Lite <= 2.0.5, Brilliance <= 1.2.7, MedZone Lite <= 1.2.4, Regina Lite <= 2.0.4, Transcend <= 1.1.8, Affluent <= 1.1.0, Bonkers <= 1.0.4, Antreas <= 1.0.2, Sparkling <= 2.4.8, and NatureMag Lite <= 1.0.4. This is due to epsilon_framework_ajax_action. This makes it possible for unauthenticated attackers to call functions and achieve remote code execution.
CVSS metrics
3 scores · 3 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- wordfenceSource9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
65.34%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 65.34% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (blog.nintechnet.com)
Maturity: unknown
Exploit Reference (blog.nintechnet.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Wordpress16 products
- activello≤ 1.4.0 (fixed in 1.4.2)
- affluent≤ 1.1.0 (fixed in 1.1.2)
- allegiant≤ 1.2.2 (fixed in 1.2.6)
- antreas≤ 1.0.2 (fixed in 1.0.7)
- bonkers≤ 1.0.4 (fixed in 1.0.6)
Machothemes5 products
- antreas≤ 1.0.2 | < 1.0.7
- medzone_lite≤ 1.2.4 | < 1.2.6
- naturemag_lite≤ 1.0.4
- newsmag≤ 2.4.1 | < 2.4.2
- regina_lite≤ 2.0.4 | < 2.0.6
Cpothemes4 products
- affluent< 1.1.2
- allegiant< 1.2.6
- brilliance< 1.3.0
- transcend< 1.2.0
Wpchill4 products
- affluent≤ 1.1.0
- allegiant≤ 1.2.2
- brilliance≤ 1.2.7
- transcend≤ 1.1.8
6 vendors · 43 products
References
6 links- blog.nintechnet.com/unauthenticated-function-injection-vulnerability-fixed-in-15-wordpress-themes/ExploitThird Party Advisory
- blog.nintechnet.com/unauthenticated-function-injection-vulnerability-in-wordpress-sparkling-theme/ExploitThird Party Advisory
- wpscan.com/vulnerability/bec52a5b-c892-4763-a962-05da7100eca5Third Party Advisory