Lucene search
PRIOn knowledge basePRION:CVE-2023-4827HistoryOct 16, 2023 - 9:15 a.m.
Cross site request forgery (csrf)
2023-10-1609:15:00
PRIOn knowledge base
www.prio-n.com
4
csrf
file manager pro
wordpress
ajax action
unauthorized access
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the fs_connector AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell.
Related
nvd
nvd
CVE-2023-4827
2023-10-16 09:15:11
wpexploit
wpexploit
File Manager Pro < 1.8 - Remote Code Execution via CSRF
2023-09-11 00:00:00
cve
cve
CVE-2023-4827
2023-10-16 09:15:11
wpvulndb
wpvulndb
File Manager Pro < 1.8 - Remote Code Execution via CSRF
2023-09-11 00:00:00
cvelist
cvelist
CVE-2023-4827 File Manager Pro < 1.8 - Remote Code Execution via CSRF
2023-10-16 08:32:43
wordfence
wordfence