CVE-2018-16966

概要

参考情報

• ansawaf.blogspot.com/2019/04/file-manager-plugin-wordpress-plugin.html · Exploit
• wordpress.org/plugins/wp-file-manager · Product
• wpvulndb.com/vulnerabilities/9614

file manager のその他の脆弱性

• CVE-2024-8918中 5.4The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This …
• CVE-2024-8746高 8.8The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation v…
• CVE-2024-8507高 8.8The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is d…
• CVE-2018-25105緊急 9.8The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in …
• CVE-2024-2654中 6.8The File Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.2.5 via the fm_download_b…