WordPress File Manager Plugin Remote Code Execution Vulnerability
CVSS score
—
EPSS probability
%97.3
Risk score
—
Published
5 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Exploit para explotar la vulnerabilidad CVE-2020-25213 en WPFileManager < 6.9
Exploit Windows server 2019 vulnerable to Zerologon with Garble, Chisel, wp-file-manager vulnerability (have video demo)
Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware simulation, VAPT analysis, and security patch implementation in a controlled lab environment.
Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.
Python exploit for RCE in Wordpress
Will write a python script for exploiting this vulnerability
WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE
WordPress Plugin Wp-FileManager 6.8 - RCE
Nuclei: WordPress File Manager Plugin - Remote Code Execution
CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit
Similar Vulnerabilities
Vulnerability in WordPress
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
Unrestricted file upload in WordPress
Cross-site scripting in WordPress
WordPress < 6.3.2 is vulnerable to Broken Access Control
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-25213"