Beveiligingsadvies

CVE-2023-4827

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-10-16 08:32:43

Laatst bijgewerkt 2025-04-23 16:15:08

Toegewezen door WPScan

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The File Manager Pro WordPress plugin before 1.8 does not properly check the CSRF nonce in the `fs_connector` AJAX action. This allows attackers to make highly privileged users perform unwanted file system actions via CSRF attacks by using GET requests, such as uploading a web shell.

← Alle CVE's bekijken Bekijk op cve.org ↗