Lucene search
PRIOn knowledge basePRION:CVE-2023-6846HistoryFeb 05, 2024 - 10:15 p.m.
Design/Logic Flaw
2024-02-0522:15:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
file manager pro
arbitrary file upload
vulnerability
code execution
version 8.3.4
version 8.3.5
capability check
The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_syntax AJAX function. This makes it possible for authenticated attackers, with subscriber access and above, to execute code on the server. Version 8.3.5 introduces a capability check that prevents users lower than admin from executing this function.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_manager_pro | le | 8.3.4 |
Related
cvelist
cvelist
CVE-2023-6846
2024-02-05 21:27:12
cve
cve
CVE-2023-6846
2024-02-05 22:15:56
wpvulndb
wpvulndb
File Manager Pro < 8.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
2024-01-24 00:00:00
wordfence
wordfence
nvd
nvd
CVE-2023-6846
2024-02-05 22:15:56