CVE-2013-20002

CRITICAL 9.8CVE-2013-20002 · Published 17/06/2021 · updated 16/06/2026

In short

CVE-2013-20002 is a CRITICAL (CVSS 9.8) vulnerability affecting framework (themify).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.2% of all vulnerabilities.
Fix: update to 1.2.2 or later.

Package	Affected versions	Patched versions
framework themify	`< 1.2.2`	`1.2.2`

Description

Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file.

References

en.0day.today/exploit/22090 · Permissions Required
packetstormsecurity.com/files/124149/WordPress-Elemin-Shell-Upload.html · Exploit
themify.me/blog/updated-themify-framework-to-fix-the-vulnerability · Vendor Advisory
themify.me/blog/urgent-vulnerability-found-in-themify-framework-please-read · Release Notes

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free