CVE-2023-4861

PoC —

CVSS 3.1

7.2 high

EPSS

1%p70

Published

Oct 16, 2023 (Oct 16, 2023)

Modified

Jun 17, 2026

Description

The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.

Vendors: ninjateam
Products: filester
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.