TopVuln

High-risk vulnerability digests

CVE-2020-25213

  • CRITICAL
  • KEV

WordPress File Manager Plugin Remote Code Execution Vulnerability

Details

CVSS v3
10.0
CVSS v2
7.5
NVD published
2020-09-09 16:15:12
CISA date
2021-11-03
EPSS
94.4% probability · 100.0th percentile — 2026-05-09
Affected versions
cpe:2.3:a:filemanagerpro:file_manager:*:*:*:*:free:wordpress:*:*
Summary
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
Remediation
Apply updates per vendor instructions.
Exploit info
No exploit-tagged NVD references in our cache; see the CISA KEV link below.

View on NVD  ·  CISA KEV catalog

TopVuln sends digest emails with high-risk CVE picks across multiple authoritative sources—curated with EPSS and AI. Choose daily per-stream emails and optional weekly or monthly roundups.

Subscribe — free email digest or paid plan

Information is aggregated from multiple authoritative sources for convenience; verify with NVD and vendors before operational decisions.