high8.8
CVE-2018-16966
There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
Impact
There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Filemanagerpro | File Manager | Version 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ansawaf.blogspot.com/2019/04/file-manager-plugin-wordpress-plugin.html
- https://wordpress.org/plugins/wp-file-manager/#developers
- https://wpvulndb.com/vulnerabilities/9614
- https://ansawaf.blogspot.com/2019/04/file-manager-plugin-wordpress-plugin.html
- https://wordpress.org/plugins/wp-file-manager/#developers
- https://wpvulndb.com/vulnerabilities/9614