Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

VulnCheck KEV: CVE-2020-25213

🗓️ 09 Sep 2020 00:00:00Reported by VulnCheckType 
vulncheck_kev
 vulncheck_kev🔗 console.vulncheck.com👁 16 Views

WordPress File Manager plugin remote code execution allows unauthenticated users to run PHP and upload.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
zdt
zdt		WordPress File Manager 6.8 Remote Code Execution Exploit
10 Nov 202000:00
–zdt
zdt
zdt		WordPress WP-file-manager v6.9 Plugin - Unauthenticated Arbitrary File Upload Exploit
3 Apr 202300:00
–zdt
githubexploit
GithubExploit		wp-file-manager-poc-chain
1 Sep 202603:56
–githubexploit
githubexploit
GithubExploit		wp-file-manager-poc-chain
1 Sep 202603:56
–githubexploit
githubexploit
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager
10 Oct 202017:50
–githubexploit
githubexploit
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Webdesi9 File_Manager
25 Aug 202022:07
–githubexploit
githubexploit
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Webdesi9 File_Manager
22 Jan 202316:54
–githubexploit
githubexploit
GithubExploit		Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager
10 May 202612:07
–githubexploit
attackerkb
attackerkb		CVE-2020-25213
9 Sep 202000:00
–attackerkb
bdu_fstec
BDU FSTEC		The vulnerability of the File Manager plugin (wp-file-manager) of the WordPress content management system allows a hacker to execute arbitrary PHP code on the target system.
24 Aug 202100:00
–bdu_fstec
Rows per page
Vulncheck
Node
filemanagerprofile_managerRange<6.9freewordpress

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
09 Sep 2020 00:00Current
8.9High risk
Vulners AI Score8.9
CVSS 27.5
CVSS 3.19.8 - 10
EPSS0.97328
SSVC
WordPress File Managerremote code executionunauthenticated usersrun PHPupload
16