CVE-2024-12331

4.3MEDIUM

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_plugin' function in all versions up to, a

Published: 12/19/2024Updated: 3/5/2025
View on NVDView on MITRE

Description

The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_plugin' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install the Filebird plugin.

AI AnalysisPowered by AI

Affected Products

ninjateamfilester

References