Approved changes feed: RSS · Atom

cpe:2.3:a:themexa:secure_file_manager:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorThemexa (2ade88af-a1cb-577a-80bd-2bc403321909)
ProductSecure File Manager (472cfab9-caf9-53f6-a35c-6edff67633c2)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35235 vulnerable 2026-06-08 05:25:00.986316 Details available
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Published: 2020-12-14T02:20:27.000Z
Updated: 2024-08-04T17:02:07.522Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.