File Manager Plugin · Sandworm Watch

Nov 3, 2021high

CVE-2020-25213: WordPress File Manager Plugin Remote Code Execution Vulnerability

WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site. Required action: Apply updates per vendor instructions.

CVE-2020-25213EPSS 97.3%File Manager PluginWordPress

CISA KEV ↗ · unattributed attribution