Description
WordPress Plugin Wp-FileManager is prone to a vulnerability that attackers can exploit to upload arbitrary PHP script code and execute it in the context of the webserver process. WordPress Plugin Wp-FileManager version 1.2 is vulnerable; other versions may also be affected.
Remediation
Update to the latest version
References
http://www.exploit-db.com/exploits/4844/
http://packetstormsecurity.com/files/view/62341/wpfile-upload.txt
Related Vulnerabilities
Play Framework Uncontrolled Resource Consumption Vulnerability (CVE-2022-31018)
WordPress Plugin Advanced User Registration and Management Cross-Site Scripting (2.3.5)
MySQL Cleartext Transmission of Sensitive Information Vulnerability (CVE-2017-3305)