PT-2023-17545 · WordPress · Advanced File Manager Shortcodes

Mateus Machado Tesser · Published 2023-06-27 · Updated 2026-03-10 · CVE-2023-2068

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions File Manager Advanced Shortcode WordPress plugin versions 2.3.2 and earlier

Description The issue arises from inadequate prevention of uploading files with disallowed MIME types when using the shortcode, leading to remote code execution (RCE) in cases where the allowed MIME type list does not include PHP files. This can be exploited by unauthenticated users in the worst-case scenario.

Recommendations For versions 2.3.2 and earlier, update to a version that includes a fix for this issue to prevent the uploading of files with disallowed MIME types. As a temporary workaround, consider restricting access to the shortcode or disabling it until a patch is available. Restrict the allowed MIME type list to only include necessary file types to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2023-2068

Affected Products

Advanced File Manager Shortcodes

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_fma_shortcode_unauth_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/51505 · Exploit
• 🔥 https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056 · Exploit
• 🔥 http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-2068 · Security Note
• https://osv.dev/vulnerability/CVE-2023-2068 · Vendor Advisory
• https://t.me/cvenotify/55108 · Telegram Post