Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2020-25213: Changeset 2373068 – WordPress Plugin Repository

The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.

CVE
#git#wordpress#php#auth

Timestamp:

09/01/2020 12:33:01 PM (3 years ago)

mndpsingh287

Message:

fixed security issues

Location:

wp-file-manager/trunk

Files:

  • file_folder_manager.php (2 diffs)
  • lib/php/connector.maximal.php-dist
  • lib/php/connector.minimal.php
  • lib/php/connector.minimal.php-dist
  • lib/php/connector.php-dist
  • readme.txt (2 diffs)

Legend:

Unmodified

Added

Removed

  • wp-file-manager/trunk/file_folder_manager.php

    r2372895

    r2373068

5

5

  Description: Manage your WP files.

6

6

  Author: mndpsingh287

7

 

  Version: 6.8

 

7

  Version: 6.9

8

8

  Author URI: https://profiles.wordpress.org/mndpsingh287

9

9

  License: GPLv2

…

…

 

17

17

    {

18

18

        protected $SERVER = 'http://ikon.digital/plugindata/api.php';

19

 

        var $ver = '6.8';

 

19

        var $ver = '6.9';

20

20

        /\* Auto Load Hooks \*/

21

21

        public function \_\_construct()
  • wp-file-manager/trunk/readme.txt

    r2372895

    r2373068

5

5

Tested up to: 5.5

6

6

Requires PHP: 5.2.4

7

 

Stable tag: 6.8

 

7

Stable tag: 6.9

8

8

License: GPLv2 or later

9

9

License URI: http://www.gnu.org/licenses/gpl-2.0.html

…

…

 

138

138

\== Changelog ==

139

139

 

140

\= 6.9 (1st Sept, 2020) =

 

141

 

142

\* Security issue fixed

 

143

140

144

\= 6.8 (31st Aug, 2020) =

141

145

Note: See TracChangeset for help on using the changeset viewer.

Related news

WordPress File Manager 6.9 Shell Upload

WordPress File Manager plugin versions 6.0 through 6.9 suffer from a remote shell upload vulnerability.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907