Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager β 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager β 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a throu...
7.2CVSS
7AI Score
0.001EPSS
The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed ...
6.5CVSS
6.3AI Score
0.001EPSS
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attacker...
8.1CVSS
8.3AI Score
0.001EPSS
The Bit File Manager β 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. This makes it possible for authenticated a...
8.8CVSS
9AI Score
0.001EPSS