CVE-2023-2068

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.

Affected

file-manager-advanced-shortcode

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

39.62% chance of exploitation in the next 30 days, 99th percentile

Published

2023-06-27

Updated

2025-02-13

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3…
• https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_fma_shortco…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51505

References

• CVE Record
• NVD entry