WordPress File Manager Plugin Arbitrary File Upload Vulnerability
Vulnerability
A vulnerability allowing unrestricted file upload has been identified in the File Manager Plugin for WordPress, affecting versions through 7.5. This vulnerability could be exploited to upload a web shell to the server, potentially leading to unauthorized access or control over the website.
Impact
Exploitation of this vulnerability could allow a malicious actor to upload any type of file, including backdoors that could be executed to gain further access to the website.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
4.8remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.