Lucene search
WPScanCVELIST:CVE-2023-5907HistoryDec 11, 2023 - 7:22 p.m.
CVE-2023-5907 File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
2023-12-1119:22:37
WPScan
www.cve.org
1
cve-2023-5907
file manager
wordpress plugin
security issue
system files access
multisite setup
0.001 Low
EPSS
Percentile
19.6%
The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files.
CNA Affected
[
{
"vendor": "Unknown",
"product": "File Manager",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "6.3"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpexploit
wpexploit
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
2023-11-20 00:00:00
prion
prion
Design/Logic Flaw
2023-12-11 20:15:00
cve
cve
CVE-2023-5907
2023-12-11 20:15:07
wpvulndb
wpvulndb
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
2023-11-20 00:00:00
nvd
nvd
CVE-2023-5907
2023-12-11 20:15:07
wordfence
wordfence