CVE-2020-25213: WordPress File Manager Plugin Remote Code Execution Vulnerability
The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension. This, for example, allows attackers to run the elFinder upload (or mkfile and put) command to write PHP code into the wp-content/plugins/wp-file-manager/lib/files/ directory. This was exploited in the wild in August and September 2020.
Other sources
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
— CISA
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-25213?
CVE-2020-25213 is a vulnerability in the File Manager (wp-file-manager) plugin before 6.9 for WordPress that allows remote attackers to upload and execute arbitrary PHP code.
How does the File Manager (wp-file-manager) plugin vulnerability occur?
The vulnerability occurs because the plugin renames an unsafe example elFinder connector file to have the .php extension, allowing attackers to run the elFinder upload and execute arbitrary PHP code.
What software is affected by CVE-2020-25213?
The WordPress File Manager plugin version up to 6.9 and Webdesi9 File Manager are affected by this vulnerability.
What is the severity of CVE-2020-25213?
The severity of CVE-2020-25213 is critical with a severity value of 9.8.
How can I fix the CVE-2020-25213 vulnerability?
To fix the vulnerability, update the File Manager (wp-file-manager) plugin to version 6.9 or higher.