4 matches found
CVE-2024-7627
CVE-2024-7627 affects the WordPress Bit File Manager plugin (versions 6.0–6.5.5). The vulnerability stems from the checkSyntax function writing a temporary PHP file into a publicly accessible directory before validating input, enabling unauthenticated attackers to execute code on the server when ...
CVE-2022-47599
CVE-2022-47599 affects the Bit File Manager WordPress plugin (
CVE-2024-7770
CVE-2024-7770 affects Bit File Manager for WordPress (
CVE-2023-5907
CVE-2023-5907 affects the WordPress plugin File Manager, prior to version 6.3. The root directory for the file manager is not restricted, allowing an administrator to set a root outside the WordPress root (including in multisite setups), which can grant access to system files and directories. The...