WordPress File Manager Plugin Remote Code Execution Vulnerability
CVSS Skor
—
EPSS İhtimal
%97.3
Risk Skoru
—
Yayın
5 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Exploit Windows server 2019 vulnerable to Zerologon with Garble, Chisel, wp-file-manager vulnerability (have video demo)
Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware simulation, VAPT analysis, and security patch implementation in a controlled lab environment.
Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.
Python exploit for RCE in Wordpress
Will write a python script for exploiting this vulnerability
CVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit
WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCE
WordPress Plugin Wp-FileManager 6.8 - RCE
Nuclei: WordPress File Manager Plugin - Remote Code Execution
İlgili Benzer Açıklar
Vulnerability in WordPress
WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution
WordPress < 7.0.2 - Facilitated SQL Injection via author__not_in in WP_Query
Unrestricted file upload in WordPress
Cross-site scripting in WordPress
WordPress < 6.3.2 is vulnerable to Broken Access Control
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-25213"