Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Plugin secure-file-manager 访问控制错误漏洞
Vulnerability Description
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 Wordpress secure-file-manager plugin through 2.5版本存在访问控制错误漏洞，该漏洞源于vendor/elfinder/php/connector.minimal.php加载elfinder代码没有适当的访问控制。任何经过身份验证的用户都可以运行elFinder upload命令来实现远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A