CVE:CVE-2020-36708
CNNVD:CNNVD-202306-501
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。WordPress theme是WordPress的一款主题。
WordPress theme Epsilon Framework存在代码注入漏洞，该漏洞源于易受函数注入攻击。
solution:Upgrade colorlib activello to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade colorlib bonkers to a higher version than 1.0.6,and avoid the version (,1.0.6); Upgrade colorlib illdy to a higher version than 2.1.7,and avoid the version (,2.1.7); Upgrade colorlib newspaper_x to a higher version than 1.3.2,and avoid the version (,1.3.2); Upgrade colorlib pixova_lite to a higher version than 2.0.7,and avoid the version (,2.0.7); Upgrade colorlib shapely to a higher version than 1.2.9,and avoid the version (,1.2.9); Upgrade colorlib sparklinkg to a higher version than 2.4.8,and avoid the version (,2.4.8]; Upgrade cpothemes affluent to a higher version than 1.1.2,and avoid the version (,1.1.2); Upgrade cpothemes allegiant to a higher version than 1.2.6,and avoid the version (,1.2.6); Upgrade cpothemes brilliance to a higher version than 1.3.0,and avoid the version (,1.3.0); Upgrade cpothemes transcend to a higher version than 1.2.0,and avoid the version (,1.2.0); Upgrade machothemes antreas to a higher version than 1.0.7,and avoid the version (,1.0.7); Upgrade machothemes medzone_lite to a higher version than 1.2.6,and avoid the version (,1.2.6); Upgrade machothemes naturemag_lite to a higher version than 1.0.4,and avoid the version (,1.0.4]; Upgrade machothemes newsmag to a higher version than 2.4.2,and avoid the version (,2.4.2); Upgrade machothemes regina_lite to a higher version than 2.0.6,and avoid the version (,2.0.6)