high8.8
CVE-2020-35235
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control.
Impact
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Themexa | Secure File Manager | through 2.5 |
References
- NVD record
- CVE.org record
- https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/
- https://wordpress.org/plugins/secure-file-manager/#developers
- https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/
- https://wordpress.org/plugins/secure-file-manager/#developers