Vulnerability · Published Aug 3, 2024 · Assigned by Wordfence
CVE-2024-7031File Manager Pro – Filester <= 1.8.2 - Authenticated Plugin Settings Update
High 7.5
In plain English
A high-severity missing authorization in File Manager Pro – Filester from ninjateam. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Official description
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with a role that has been granted permissions by an Administrator, to update the plugin settings for user role restrictions, including allowing file types such as .php to be uploaded.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ninjateam | File Manager Pro – Filester | 0 – through 1.8.2 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.wordfence.com/threat-intel/vulnerabilities/id/aef584bd-60a5-4bf2-b8d3-58e3b45e785e?source=cve
- https://plugins.trac.wordpress.org/browser/filester/trunk/includes/File_manager/FileManager.php#L566
- https://plugins.trac.wordpress.org/changeset/3129722/
- https://nowotarski.info/wordpress-nonce-authorization/ technical-description