Exploited Vulnerabilities DailyCVE-2020-25213: WordPress File Manager Plugin
EPSS97.3%No. 297 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV6
Same product1
| Field | Value |
|---|---|
| Vendor | WordPress |
| Product | File Manager Plugin |
| Name | WordPress File Manager Plugin Remote Code Execution Vulnerability |
| Added to KEV | 2021-11-03 |
| US federal due date | 2022-05-03 |
| Ransomware use | Unknown |
| CWE | CWE-434 |
CISA description
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A WordPress File Manager Plugin vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.