CVE-2018-25105

CRITICAL EXPLOITED

WordPress File Manager <3.0 - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2018-25105 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary files that can be used for remote code execution.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0078
EPSS Percentile 51.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

VulnCheck KEV 2024-10-15
CWE
CWE-862
Status published
Products (2)
filemanagerpro/file_manager < 3.0
mndpsingh287/File Manager < 3.0
Published Oct 16, 2024
Tracked Since Feb 18, 2026