CVE-2023-4861high

CVE-2023-4861: falha de alta gravidade em File Manager Pro

File Manager Pro < 1.8.1 - Admin+ Remote Code Execution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar File Manager Pro

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 1.7%
The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Unknown · File Manager Pro
CVEs relacionadas — File Manager Pro

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4827HIGHFile Manager Pro < 1.8 - Remote Code Execution via CSRFEPSS 7.9%CVE-2026-6382CRITICALMultiple elFinder Plugins - Authenticated OS Command InjectionEPSS 1.4%CVE-2023-4862—File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.5%CVE-2026-85081HIGHMultiple elFinder Plugins - DOM-based XSS via postMessage Origin BypassEPSS 0.2%