https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:17:16.820129+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-6846 CVE-2023-6846 — File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload 2026-10-05T23:17:16.839229+00:00

Affected: File Manager Pro

The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_syntax AJAX function. This makes it possible for authenticated attackers, with subscriber access and above, to execute code on the server. Version 8.3.5 introduces a capability check that prevents users lower than admin from executing this function.