Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2023-4861

File Manager Pro < 1.8.1 - Admin+ Remote Code Execution

Description

The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown File Manager Pro

Default version status: unaffected

  • 0 to < 1.8.1affected

References