💣Exploit CVE-2018-25105 - WordPress File Manager Authorization Bypass

[Mental_Outlaw]

CVE ID : CVE-2018-25105
Published : Oct. 16, 2024, 7:15 a.m. | 4 hours, 55 minutes ago
Description : The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in versions up to, and including, 3.0. This makes it possible for unauthenticated attackers to download arbitrary files from the server and upload arbitrary files that can be used for remote code execution.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Reply if you wish me to write a poc tools of this exploit for you.