7.5
Élevée
CVE-2024-8066 The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation…
Description
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Administrator, to upload a new .htaccess file allowing them to subsequently upload arbitrary files on the affected site's server which may make remote code execution possible.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| File Manager Pro – Filester 1.8 | premières → 1.8.6 | Pas de correctif indiqué |
| filemanager_pro-filester 1.8 | premières → 1.8.4 | Pas de correctif indiqué |
Autres CVE de File Manager Pro – Filester
Les 6 CVE de File Manager Pro – Filester →
CVE-2025-0818
Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various…
6.5
Moyenne
CVE-2025-3234
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
7.2
Élevée
CVE-2024-12331
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
4.3
Moyenne
CVE-2024-9669
The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up…
7.2
Élevée