H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.

Labels

exploitedkev

CISA KEV context

Vendor / productWordPress File Manager Plugin
Added2021-11-03
Due date2022-05-03
2 recorded

Relationships

2 external

References

nvd
CVE-2020-25213
open
cwe
CWE-434
open