CVE-2024-7627

Exploit für CVE-2024-7627 — Bit File Manager WordPress Unauthenticated RCE Exploit 📌 Beschreibung Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2024-7627 , eine kritische Unauthenticated Remote Code Execution RCE -Sicherheitslücke im Bit File Manager WordPress-Plugin...

CVE-2024-7627-PoC

CVE-2024-7627-PoC Contesto Questo script Proof-of-Concept PoC riguarda la vulnerabilità di Esecuzione di Codice Remoto non autenticata tramite race condition CVE-2024-7627 nel plugin WordPress Bit File Manager versioni 6.0 - 6.5.5. Informazioni Descrizione: Il plugin Bit File Manager per WordPres...

CVE-2024-8743-PoC

CVE-2024-8743 PoC Contesto Script Proof-of-Concept per il plugin WordPress Bit File Manager versione = 6.5.7 Vulnerabilità di caricamento limitato di file JavaScript autenticato Subscriber+ CVE-2024-8743 Informazioni Descrizione: Il plugin Bit File Manager – File Manager e Editor di Codice 100%...

CVE-2026-17542

The CVE concerns the File Manager WordPress plugin before 6.9.1. One of its file manager connector endpoints lacks a capability check, allowing any authenticated user (e.g., a subscriber) to browse the entire WordPress installation directory and download files of certain types (archives and docum...

CVE-2026-17541 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...

CVE-2026-17541

The CVE-2026-17541 affects the WordPress File Manager plugin prior to version 6.9.1. A REST API route lacks authorization checks, enabling unauthenticated users to read the file activity log and reveal file operations, involved paths, and the performing user. Documents confirm the vulnerability a...

CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

CVE-2026-17540

The CVE describes a vulnerability in the WordPress File Manager plugin prior to version 6.9.1. The issue is improper authorization of file management commands, allowing any authenticated user (e.g., a subscriber) to read and delete arbitrary files under the WordPress installation directory. This ...

Exploit for Code Injection in Bitapps File_Manager

CVE-2024-7627 — Bit File Manager WordPress Unauthenticated R...

EUVD-2022-50359

Malicious code in bioql PyPI...

EUVD-2025-16714

Malicious code in bioql PyPI...

WordPress Bit File Manager plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Bit File Manager plugin, which stems from insufficient input cleanup and escaping during SVG file uploads, and no...

CVE-2025-1725

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2025-1725

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2025-1725 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2025-1725 Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

CVE-2025-1725

CVE-2025-1725 concerns the WordPress Bit File Manager plugin, vulnerable to a Stored Cross-Site Scripting (XSS) via SVG uploads in all versions up to and including 6.7. The root cause is insufficient input sanitization and output escaping during SVG file handling. Exploitation requires authentica...

WordPress plugin Bit File Manager 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Bit File Manager plugin, which stems from insufficient input cleanup and escaping during SVG file uploads, and no...

PT-2025-23590 · Unknown · Bit File Manager

Name of the Vulnerable Software and Affected Versions: The Bit File Manager versions up to, and including, 6.7 Description: The issue is related to Stored Cross-Site Scripting via SVG File uploads due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

CVE-2024-8743

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.5.7. This is due to a lack of proper checks on allowed file types. This makes it possible for...