CVE-2020-25213
WordPress File Manager Plugin
WordPress File Manager Plugin Remote Code Execution Vulnerability
What it is
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other WordPress entries on the list
- WordPress Core WordPress WordPress Core Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability CVE-2026-119977 · Nov 3, 2026
- Core WordPress Core Remote File Inclusion Vulnerability CVE-2026-87902 · Sep 25, 2026
- Core WordPress Core Interpretation Conflict Vulnerability CVE-2026-63030 · Jul 21, 2026
- Core WordPress Core SQL Injection Vulnerability CVE-2026-60137 · Jul 21, 2026
- Snap Creek Duplicator Plugin WordPress Snap Creek Duplicator Plugin File Download Vulnerability CVE-2020-11738 · Nov 3, 2021
- Social Warfare Plugin WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability CVE-2019-9978 · Nov 3, 2021