WordPress Plugin Wpfilemanager 6.8 RCE

Impact: High


OS Command Execution, also known as Command Injection, is a severe vulnerability that allows attackers to execute arbitrary commands on the host operating system. Attackers exploit this vulnerability by injecting malicious commands through forms, cookies, or HTTP headers. These commands run with the privileges of the vulnerable application, leading to unauthorized access, data theft, and system compromise.


Update or remove the affected plugin.


Last updated on May 13, 2024

This issue is available in SmartScanner Professional

See Pricing