cbcvebase.

Themexa Secure File Manager vulnerabilities

1 known vulnerability affecting themexa/secure_file_manager.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2020-35235P1HIGHCVSS 8.8Exploited≤ 2.52020-12-14
CVE-2020-35235 [HIGH] CVE-2020-35235: vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPres vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
nvd
Themexa Secure File Manager vulnerabilities | cvebase