plugin

Secure File Manager Vulnerabilities

1 known security issue reported for the Secure File Manager WordPress plugin. Most recent disclosed Nov 23, 2020.

1 high

Running Secure File Manager on your site? Check whether your installed version is affected.

Secure File Manager < 2.8.2 - Remote Code Execution

high

vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer su...

CVSS:: 8.8
Affected:: up to 2.8.2
Fixed in:: 2.8.2
Disclosed:: Nov 23, 2020

CVE-2020-35235 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database