CVE-2018-16363

概要

参考情報

• blog.51cto.com/010bjsoft/2171087 · Exploit
• plugins.trac.wordpress.org/changeset/1936043 · Patch
• wordpress.org/support/topic/security-concern-6 · Third Party Advisory
• wpvulndb.com/vulnerabilities/9126 · Patch

file manager のその他の脆弱性

• CVE-2024-8918中 5.4The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This …
• CVE-2024-8746高 8.8The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation v…
• CVE-2024-8507高 8.8The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is d…
• CVE-2018-25105緊急 9.8The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in …
• CVE-2024-2654中 6.8The File Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.2.5 via the fm_download_b…