CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WordPress File Manager Plugin Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2020-25213)
[Affected Scope] WordPress File Manager (wp-file-manager) plugin versions 6.0 through 6.8
[Impact] Unauthenticated remote attackers can upload and execute arbitrary PHP code, leading to complete compromise of the underlying web server
[Mitigation] Immediately update the File Manager plugin to version 6.9 or higher, or completely deactivate and remove the plugin if not required
WordPress Social Warfare Plugin Remote Code Execution and Stored XSS Vulnerability (CVE-2019-9978) Analysis & Mitigation Guide
[Affected Scope] WordPress Social Warfare and Social Warfare Pro plugins prior to version 3.5.3
[Impact] Unauthenticated attackers can inject malicious scripts, leading to administrative privilege takeover and Remote Code Execution (RCE)
[Mitigation] Immediately update the Social Warfare plugin to version 3.5.3 or higher, and block unauthorized debug parameter requests