7.2
Élevée
CVE-2023-4861 The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments…
Description
The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| File Manager Pro 1.8 | premières → < 1.8.1 | 1.8.1 |
Autres CVE de File Manager Pro
Les 5 CVE de File Manager Pro →
CVE-2026-85081
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro …
7.5
Élevée
CVE-2026-6382
The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager…
9.1
Critique
CVE-2023-4862
The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS…
Non notée
CVE-2023-4827
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX…
8.8
Élevée