File Manager Pro Security Vulnerabilities and Issues — File Manager Pro CVE List

Lucene search

Filemanagerpro.ioFile Manager Pro

3 matches found

CVE•added 2023/10/16 9:15 a.m.•65 views

CVE-2023-4827

The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the fs_connector AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell.

8.8CVSS8.5AI score0.21212EPSS

CVE•added 2023/10/16 8:15 p.m.•39 views

CVE-2023-4861

The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.

7.2CVSS7.5AI score0.03529EPSS

CVE•added 2023/10/16 8:15 p.m.•35 views

CVE-2023-4862

The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users.

4.8CVSS4.8AI score0.00077EPSS