PT-2020-17295 · WordPress · Secure-File-Manager

Jerome Bruandet · Published 2020-12-14 · Updated 2024-08-04 · CVE-2020-35235

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Secure-file-manager plugin versions through 2.5 for WordPress

Description The issue arises from the secure-file-manager plugin loading elFinder code without proper access control, allowing any authenticated user to run the elFinder upload command and achieve remote code execution. This affects products that are no longer supported by the maintainer.

Recommendations For versions through 2.5, consider disabling the elFinder upload command as a temporary workaround until a patch is available, but note that since these versions are no longer supported, a patch may not be forthcoming. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2020-35235

Affected Products

Secure-File-Manager

References · 7

• 🔥 https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35235 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35235 · Vendor Advisory
• https://wordpress.org/plugins/secure-file-manager/#developers · Note
• https://t.me/cvenotify/89039 · Telegram Post
• https://t.me/cvenotify/82815 · Telegram Post
• https://t.me/cvenotify/7129 · Telegram Post