Security Advisory

CVE-2024-7627

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-09-05 02:04:24

Last updated 2024-09-05 13:32:49

Assigner Wordfence

State PUBLISHED

Description

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the checkSyntax function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions.

← Browse all CVEs View on cve.org ↗