Extension WordPress
Vulnérabilités Media File Manager
Cette page rassemble les failles publiées pour Media File Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Media File Manager
4 fiches
Media File Manager <= 1.4.2 – Reflected Cross-Site Scripting
The Media File Manager plugin 1.4.2 for WordPress allows XSS via the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI.
*-1.4.2
1.4.3
05/11/2018
Media File Manager <= 1.4.2 – Directory Traversal to Arbitrary File Relocation
The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to parameters of an mrelocator_move action to the wp-admin/admin-ajax.php URI.
*-1.4.2
1.4.3
11/05/2018
Media File Manager <= 1.4.2 – Directory Traversal to Arbitrary File Read
The Media File Manager plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 1.4.2 via the dir parameter. This allows attackers to read the contents of arbitrary files on the server, which can…
*-1.4.2
1.4.3
11/05/2018
Media File Manager <= 1.4.2 – Directory Traversal to Directory Listing
The Media File Manager plugin up to and including version 1.4.2 for WordPress allows directory listing via a ../ directory traversal in the dir parameter of an mrelocator_getdir action to the wp-admin/admin-ajax.php URI
*-1.4.2
1.4.3
11/05/2018
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.