Description
Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ninjateam File Manager Pro – Filester
Default version status: unaffected
0 to ≤ 1.8.9affected
saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
Default version status: unaffected
0 to ≤ 5.3.6affected
File Manager File Manager Pro
Default version status: unaffected
0 to ≤ 8.4.2affected
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c2a166de-3bdf-4883-91ba-655f2757c53b?source=cve ↗
- https://github.com/Studio-42/elFinder ↗
- https://plugins.trac.wordpress.org/browser/wp-file-manager/trunk/lib/php/elFinder.class.php ↗
- https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/library/php/elFinder.class.php#L5411 ↗
- https://plugins.trac.wordpress.org/browser/filester/trunk/includes/File_manager/lib/php/elFinder.class.php#L5378 ↗
- https://github.com/Studio-42/elFinder/blob/master/php/elFinder.class.php#L5367 ↗
- https://plugins.trac.wordpress.org/changeset/3319016/filester ↗
- https://plugins.trac.wordpress.org/changeset/3335715/file-manager-advanced/trunk/application/library/php/elFinder.class.php ↗