File Manager Pro – Filester, CVE-2023-4861
- CVE, Research URL
- Home page URL
- Application
- Published on
- Oct 17, 2023
- Research Description
- The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.
- Affected versions
-
Min -, max 1.8.1.
- Status
-
vulnerable