Cybersecurity Alerts

WordPress File Manager Plugin Remote Code Execution Vulnerability

WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-434

References

• https://nvd.nist.gov/vuln/detail/CVE-2020-25213