Lucene search
+L

4103 matches found

NVD
NVD
•added 2023/12/20 6:15 p.m.•31 views

CVE-2022-47599

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a...

7.2CVSS0.00516EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/20 6:15 p.m.•40 views

Deserialization of untrusted data

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a...

5.8CVSS7.2AI score0.00516EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/20 5:42 p.m.•43 views

CVE-2022-47599 WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a...

5.5CVSS7.3AI score0.00516EPSS
SaveExploits0References1
CVE
CVE
•added 2023/12/20 5:42 p.m.•111 views

CVE-2022-47599

CVE-2022-47599 affects the Bit File Manager WordPress plugin (

7.2CVSS7.5AI score0.00516EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/20 5:42 p.m.•15 views

CVE-2022-47599 WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a...

5.5CVSS7.1AI score0.00516EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/20 12:00 a.m.•20 views

PT-2023-15422 · WordPress · File Manager

Name of the Vulnerable Software and Affected Versions: File Manager – 100% Free & Open Source File Manager Plugin for WordPress versions n/a through 5.2.7 Description: The issue is related to Deserialization of Untrusted Data, which affects the File Manager plugin for WordPress. Recommendations:...

7.2CVSS7.3AI score0.00516EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•5 views

CVE-2022-47599: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a...

7.2CVSS7.5AI score0.00516EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•2 views

CVE-2023-40204: Unrestricted Upload of File with Dangerous Type

Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2...

9.1CVSS7.5AI score0.00832EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/12/19 12:00 a.m.•24 views

WordPress Bit File Manager Plugin < 6.3 is vulnerable to Path Traversal

Software Bit File Manager Type Plugin Vulnerable versions 6.3 Fixed in 6.3 OWASP Top 10 A5: Security Misconfiguration Classification Path Traversal CVE CVE-2023-5907 Patch priority Low CVSS severity Low 5.5 Developer Claim ownership PSID f6d18601e62a Credits Dmitrii Ignatyev Required privilege...

6.5CVSS6.5AI score0.0085EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2023/12/18 12:31 a.m.•41 views

CVE-2023-6907 codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...

5.4CVSS9.5AI score0.01201EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/18 12:31 a.m.•77 views

CVE-2023-6907

The CVE-2023-6907 entry concerns codelyfe Stupid Simple CMS (versions up to 1.2.4). The vulnerability affects the Deletion Interface’s file-manager delete.php, where manipulation of the file parameter leads to improper authentication. Public exploit details exist, indicating potential exploitatio...

9.1CVSS7.5AI score0.01201EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/18 12:00 a.m.•5 views

CVE-2023-6907: Improper Authentication

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper...

9.1CVSS5.8AI score0.01201EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/18 12:00 a.m.•21 views

PT-2023-32815 · Codelyfe · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.4 Description: A critical issue has been found in the Deletion Interface component, specifically in the /file-manager/delete.php file. The manipulation of the file argument leads to improper...

9.1CVSS5.8AI score0.01201EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/12/17 12:00 a.m.•4 views

PT-2023-32811

Name of the Vulnerable Software and Affected Versions codelyfe Stupid Simple CMS versions up to 1.2.4 Description A critical issue has been found in the file /file-manager/upload.php, where the manipulation of the file argument leads to unrestricted upload. The exploit has been disclosed to the...

9.8CVSS5.2AI score0.00972EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/17 12:00 a.m.•6 views

CVE-2023-6902: Unrestricted Upload of File with Dangerous Type

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The exploit has been disclosed to the public and m...

9.8CVSS5.9AI score0.00972EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/16 12:00 a.m.•19 views

KodExplorer Code Issue Vulnerability

KodExplorer is a web file manager by the individual developer warlee. A code issue vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation that can lead to server-side request forgery...

9.8CVSS6.9AI score0.00762EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/12/16 12:00 a.m.•17 views

KodExplorer Code Issue Vulnerability

KodExplorer is a web file manager by the individual developer warlee. A code issue vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation of parameter paths that can lead to server-side request forgery...

9.8CVSS6.9AI score0.00701EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/16 12:00 a.m.•21 views

KodExplorer Code Injection Vulnerability

KodExplorer is a web file manager by the individual developer warlee. A code injection vulnerability exists in KodExplorer version 4.51.03, which stems from a manipulation that could lead to code injection...

9.8CVSS7.4AI score0.0091EPSS
SaveExploits0References6
OSV
OSV
•added 2023/12/11 8:15 p.m.•18 views

CVE-2023-5907

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowe...

6.5CVSS5.5AI score0.0085EPSS
SaveExploits2References1
NVD
NVD
•added 2023/12/11 8:15 p.m.•32 views

CVE-2023-5907

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowe...

6.5CVSS0.0085EPSS
SaveExploits2References1
Rows per page
Query Builder