CVE-2020-36837

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset_wizard_actions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there is a user named 'admin', the attacker will become automatically logged in as an administrator.

• CWE-862

• https://raw.githubusercontent.com/themegrill/themegrill-demo-importer/master/CHANGELOG.txt
• https://www.openwall.com/lists/oss-security/2020/02/19/1
• https://www.webarxsecurity.com/critical-issue-in-themegrill-demo-importer/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8c0dc694-854e-4f96-8c2d-7251c41a3ee9?source=cve

Published

Oct 16, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-36831The NextScripts: Social Networks Auto-Poster plugin for Word…6.5
• CVE-2020-36832The Ultimate Membership Pro plugin for WordPress is vulnerab…9.8
• CVE-2020-36833The Indeed Membership Pro plugin for WordPress is vulnerable…6.3
• CVE-2020-36834The Discount Rules for WooCommerce plugin for WordPress is v…6.3
• CVE-2020-36835The Migration, Backup, Staging – WPvivid plugin for WordPres…6.5
• CVE-2020-36836The WP Fastest Cache plugin for WordPress is vulnerable to u…8
• CVE-2020-36838The Facebook Chat Plugin for WordPress is vulnerable to auth…7.4
• CVE-2020-36839The WP Lead Plus X plugin for WordPress is vulnerable to Cro…8.3
• CVE-2020-3684u'QSEE reads the access permission policy for the SMEM TOC p…7.8
• CVE-2020-36840The Timetable and Event Schedule by MotoPress plugin for Wor…9.8
• CVE-2020-36841The WooCommerce Smart Coupons plugin for WordPress is vulner…5.3
• CVE-2020-36842The Migration, Backup, Staging – WPvivid plugin for WordPres…8.8