Lucene search
PRIOn knowledge basePRION:CVE-2023-2068HistoryJun 27, 2023 - 2:15 p.m.
Design/Logic Flaw
2023-06-2714:15:00
PRIOn knowledge base
www.prio-n.com
10
file manager
wordpress plugin
file upload
logic flaw
rce
mime type
unauthenticated users
The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_manager_advanced_shortcode | le | 2.3.2 |
Related
zdt
zdt
wpexploit
wpexploit
cve
cve
CVE-2023-2068
2023-06-27 14:15:10
wpvulndb
wpvulndb
cvelist
cvelist
metasploit
metasploit
nvd
nvd
CVE-2023-2068
2023-06-27 14:15:10
packetstorm
packetstorm
WordPress File Manager Advanced Shortcode 2.3.2 Remote Code Execution
2023-07-25 00:00:00
File Manager Advanced Shortcode 2.3.2 Remote Code Execution
2023-06-05 00:00:00
exploitdb
exploitdb
rapid7blog
rapid7blog
Metasploit Weekly Wrap up
2023-07-28 17:25:08
wordfence
wordfence