Description

WordPress Plugin Secure File Manager is prone to a remote code execution vulnerability because it fails to sufficiently sanitize user-supplied input. Successful exploitation may allow attackers to execute arbitrary commands with the privileges of the user running the application, to compromise the application or the underlying database, to access or modify data or to compromise a vulnerable system. WordPress Plugin Secure File Manager version 2.8.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.8.2 or latest

References

https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/

https://sploitus.com/exploit?id=WPEX-ID:47C1639F-4558-4CB6-8F50-E5E8564663C2

https://plugins.svn.wordpress.org/secure-file-manager/trunk/readme.txt

Related Vulnerabilities

WordPress Plugin Passster-Password Protection Cross-Site Scripting (3.5.5.7)

WordPress 4.3.x Cross-Site Scripting Vulnerability (4.3 - 4.3.3)

WordPress Plugin TinyMCE Advanced Cross-Site Request Forgery (4.1)

WordPress Plugin Responsive Media Gallery for WordPress-Everest Gallery Lite includes Backdoor [Only if downloaded via the vendor website] (1.0.8)

WordPress Plugin PublishPress Capabilities-User Role Access, Editor Permissions, Admin Menus Cross-Site Request Forgery (2.3.1)

Severity

High

Classification

CVE-2020-35235 CWE-94 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Tags

Missing Update Code Execution