Description
WordPress Plugin Wp-FileManager is prone to a vulnerability that attackers can exploit to upload arbitrary PHP script code and execute it in the context of the webserver process. WordPress Plugin Wp-FileManager version 1.2 is vulnerable; other versions may also be affected.
Remediation
Update to the latest version
References
http://www.exploit-db.com/exploits/4844/
http://packetstormsecurity.com/files/view/62341/wpfile-upload.txt
Related Vulnerabilities
WordPress Plugin WatuPRO Multiple Vulnerabilities (4.8.8.4)
WeBid Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-47397)
WordPress Plugin Catch Sticky Menu Security Bypass (1.6.3)
ReviveAdserver URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-8143)