Headline
CVE-2020-25213: Changeset 2373068 – WordPress Plugin Repository
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.
Timestamp:
09/01/2020 12:33:01 PM (3 years ago)
mndpsingh287
Message:
fixed security issues
Location:
wp-file-manager/trunk
Files:
- file_folder_manager.php (2 diffs)
- lib/php/connector.maximal.php-dist
- lib/php/connector.minimal.php
- lib/php/connector.minimal.php-dist
- lib/php/connector.php-dist
- readme.txt (2 diffs)
Legend:
Unmodified
Added
Removed
wp-file-manager/trunk/file_folder_manager.php
r2372895
r2373068
5
5
Description: Manage your WP files.
6
6
Author: mndpsingh287
7
Version: 6.8
7
Version: 6.9
8
8
Author URI: https://profiles.wordpress.org/mndpsingh287
9
9
License: GPLv2
…
…
17
17
{
18
18
protected $SERVER = 'http://ikon.digital/plugindata/api.php';
19
var $ver = '6.8';
19
var $ver = '6.9';
20
20
/\* Auto Load Hooks \*/
21
21
public function \_\_construct()
wp-file-manager/trunk/readme.txt
r2372895
r2373068
5
5
Tested up to: 5.5
6
6
Requires PHP: 5.2.4
7
Stable tag: 6.8
7
Stable tag: 6.9
8
8
License: GPLv2 or later
9
9
License URI: http://www.gnu.org/licenses/gpl-2.0.html
…
…
138
138
\== Changelog ==
139
139
140
\= 6.9 (1st Sept, 2020) =
141
142
\* Security issue fixed
143
140
144
\= 6.8 (31st Aug, 2020) =
141
145
Note: See TracChangeset for help on using the changeset viewer.
Related news
WordPress File Manager plugin versions 6.0 through 6.9 suffer from a remote shell upload vulnerability.