Lucene search
+L

58 matches found

Kitploit
Kitploit
added 2026/09/21 2:01 p.m.9 views

CVE-2024-7627-PoC

CVE-2024-7627-PoC Background This Proof-of-Concept PoC script is for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition CVE-2024-7627 vulnerability. Information Description: The Bit File Manager plugin for WordPress is vulnerable to Remo...

8.1CVSS7.9AI score0.02802EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/20 4:59 p.m.9 views

CVE-2024-8743-PoC

CVE-2024-8743 PoC Background Proof-of-Concept script for WordPress plugin Bit File Manager version = 6.5.7 Authenticated Subscriber+ Limited JavaScript File Upload CVE-2024-8743 vulnerability Information Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for...

6.8CVSS5.9AI score0.00788EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/19 3:47 p.m.9 views

CVE-2024-7627

Exploit para CVE-2024-7627 — Bit File Manager WordPress RCE no autenticado 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2024-7627 , una vulnerabilidad crítica de Ejecución Remota de Código RCE no autenticada en el plugin de WordPress Bit File Manager...

8.1CVSS7.8AI score0.02802EPSS
SaveExploits3
Patchstack
Patchstack
added 2026/08/28 12:28 p.m.12 views

WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability

Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability discovered by Artus KG in WordPress Plugin Bit File Manager versions 6.9.1...

8.8CVSS5.9AI score0.00282EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 10:27 a.m.10 views

WordPress Bit File Manager plugin < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector vulnerability

Subscriber+ Sensitive Data Disclosure via bitappsfmconnector vulnerability discovered by JING QIAN in WordPress Plugin Bit File Manager versions 6.9.1...

7.5CVSS5.2AI score0.00303EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2026/08/27 10:24 a.m.14 views

WordPress Bit File Manager plugin < 6.9.1 - Unauthenticated File Activity Log Disclosure vulnerability

Unauthenticated File Activity Log Disclosure vulnerability discovered by Farid Narimanov in WordPress Plugin Bit File Manager versions 6.9.1...

7.5CVSS5.2AI score0.00316EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2026/08/10 6:00 a.m.66 views

CVE-2026-17542

The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directory and download files of certain types from it, including...

5.3AI score0.00303EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/10 6:00 a.m.11 views

CVE-2026-17542 Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector

The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directory and download files of certain types from it, including...

5.2AI score0.00303EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/10 6:00 a.m.47 views

CVE-2026-17541

The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...

5.3AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/10 6:00 a.m.47 views

CVE-2026-17541 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...

0.00316EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/10 6:00 a.m.9 views

CVE-2026-17541 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure

The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them...

5.3AI score0.00316EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/10 6:00 a.m.46 views

CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/10 6:00 a.m.8 views

CVE-2026-17540 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch

The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's...

5.3AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/10 6:00 a.m.58 views

CVE-2026-17540

The File Manager (also referred to as Bit File Manager ) WordPress plugin, in versions before 6.9.1 , is vulnerable to an improper access control issue. A request-source mismatch in the connector command allows any authenticated user, including those with low-level privileges such as subscribers ...

5.4AI score0.00282EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2025/10/04 2:38 p.m.313 views

Exploit for Code Injection in Bitapps File_Manager

CVE-2024-7627 — Bit File Manager WordPress Unauthenticated R...

8.1CVSS8.2AI score0.02802EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-50359

Malicious code in bioql PyPI...

7.2CVSS7.6AI score0.00516EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2025-16714

Malicious code in bioql PyPI...

6.4CVSS6.5AI score0.00219EPSS
SaveExploits0References3
CNVD
CNVD
added 2025/06/11 12:00 a.m.17 views

WordPress Bit File Manager plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Bit File Manager plugin, which stems from insufficient input cleanup and escaping during SVG file uploads, and no...

6.4CVSS6.3AI score0.00219EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/05 9:05 a.m.20 views

CVE-2025-1725

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS5.9AI score0.00219EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/03 9:15 a.m.25 views

CVE-2025-1725

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7 due to insufficient input sanitization and output escaping. This makes it...

6.4CVSS0.00219EPSS
SaveExploits0References2
Rows per page
Query Builder