Bitapps File Manager vulnerabilities

CVE-2024-7770 [HIGH] CWE-434 CVE-2024-7770: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, and gr

CVE-2024-7627 [HIGH] CWE-94 CVE-2024-7627: The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has al

CVE-2022-47599 [HIGH] CWE-502 CVE-2022-47599: Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a through 5.2.7.

CVE-2023-5907 [MEDIUM] CWE-552 CVE-2023-5907: The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, all The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files.