漏洞描述
在远程主机上运行的WordPress应用程序具有“文件管理器”插件的版本，由于elFinder的包含不当，该版本受远程代码执行漏洞的影响。未经身份验证的远程攻击者可以通过将特制请求发送到connector.minimal.php文件来利用此漏洞，以在易受攻击的WordPress站点上执行远程代码。
WordPress 插件 'File Manager' elFinder 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2024-29137: WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting
- POC wordpress-meta-box-fpd: WordPress Meta Box - Full Path Disclosure
- POC wp-add-search-to-menu-fpd: WordPress Ivory Search - Full Path Disclosure
- POC wp-advanced-iframe-fpd: WordPress Advanced iFrame - Full Path Disclosure
- POC wp-advanced-responsive-video-embedder-fpd: WordPress Advanced Responsive Video Embedder - Full Path Disclosure
- POC wp-ajax-load-more-anything-fpd: WordPress Load More Anything - Full Path Disclosure
- POC wp-ajax-search-lite-fpd: WordPress Ajax Search Lite - Full Path Disclosure
- POC wp-all-in-one-seo-pack-fpd: WordPress All in One SEO Pack - Full Path Disclosure
- POC wp-astra-fpd: WordPress Astra - Full Path Disclosure
- POC wp-better-wp-security-fpd: WordPress Plugin iThemes Security - Full Path Disclosure
- POC wp-call-now-button-fpd: WordPress Call Now Button - Full Path Disclosure
- POC wp-contact-form-7-fpd: WordPress Contact Form 7 - Full Path Disclosure
- POC wp-contact-form-fpd: WordPress Contact Form - Full Path Disclosure