6.5
Moyenne
CVE-2025-0818 Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various…
Description
Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| File Manager Pro – Filester 1.8 | premières → 1.8.9 | Pas de correctif indiqué |
| Advanced File Manager – Ultimate WP File Manager And Document Library Solution 5.3 | premières → 5.3.6 | Pas de correctif indiqué |
| File Manager 8.4 | premières → 8.4.2 | Pas de correctif indiqué |
| Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution 5.3 | premières → 5.3.6 | Pas de correctif indiqué |
| File Manager Pro 8.4 | premières → 8.4.2 | Pas de correctif indiqué |
Autres CVE de File Manager Pro – Filester
Les 6 CVE de File Manager Pro – Filester →
CVE-2025-3234
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
7.2
Élevée
CVE-2024-12331
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
4.3
Moyenne
CVE-2024-9669
The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up…
7.2
Élevée
CVE-2024-8066
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation…
7.5
Élevée