All vulnerabilities

WordPress plugins

CVE-2024-8066

File Manager Pro – Filester: Unrestricted Upload of File with Dangerous Type

Severity
High 8.8
Published
27 Nov 2024
Added to UpHeron
21 Oct 2026
Fixed in
1.8.7
Also known as
EUVD-2024-49625, WPV-d3a0a9dec993
Sources
WPVulnerability

Affected software

SoftwareAffected versions
Filester (WordPress plugin)WordPress plugins · wp-plugin:filester
  • Every version before 1.8.7

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-8066
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/filester/file-manager-pro-filester-184-authenticated-subscriber-arbitrary-file-upload