177 matches found
CVE-2023-4861-PoC
CVE-2023-4861 PoC 이 저장소는 WordPress 플러그인 File Manager Pro - Filester 의 인증된 원격 코드 실행 취약점인 CVE-2023-4861 에 대한 Python 개념 증명PoC을 포함합니다. 취약점 요약 CVE: CVE-2023-4861 제품: File Manager Pro - Filester filester 취약한 버전: 1.8.1 패치 버전: 1.8.1 취약점 유형: 인증된 임의 파일 업로드를 통한 RCE 필요한 권한: Filester의 Admin+ 이 PoC가 수행하는 작업...
WordPress File Manager Pro plugin < 2.1.3 - DOM-based XSS vulnerability
DOM-based XSS vulnerability discovered by Mutantgun in WordPress Plugin File Manager Pro versions 2.1.3...
CVE-2026-85081
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
EUVD-2026-87534
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
CVE-2026-85081 Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
CVE-2026-85081 Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
CVE-2026-85081
Multiple WordPress plugins—File Manager (before 8.0.5), FileOrganizer (before 1.2.1), and File Manager Pro (before 2.1.3)—are vulnerable to a DOM-based XSS due to improper validation of postMessage origins. The flaw exists in the bundled file-manager library (versions below 2.1.70), where the app...
PT-2026-99245
Name of the Vulnerable Software and Affected Versions File Manager WordPress plugin versions prior to 8.0.5 FileOrganizer WordPress plugin versions prior to 1.2.1 File Manager Pro WordPress plugin versions prior to 2.1.3 Description These plugins fail to correctly validate the origin of window...
CVE-2026-6382: Undefined Security Weakness
The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...
Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager
wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project...
CVE-2023-4861
The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution...
CVE-2023-4827
The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the fsconnector AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell...
EUVD-2024-50355
Malicious code in bioql PyPI...
EUVD-2023-59207
Malicious code in bioql PyPI...
EUVD-2024-48462
Malicious code in bioql PyPI...
EUVD-2024-49391
Malicious code in bioql PyPI...
EUVD-2024-50778
Malicious code in bioql PyPI...
EUVD-2024-49227
Malicious code in bioql PyPI...