{"cvss":0.0,"datePublished":"2024-01-21T00:00:00Z","dateUpdated":"2024-01-21T00:00:00Z","description":"vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer","dueDate":"","id":"CVE-2020-35235","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"secure_file_manager","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"Secure-file-manager plugin through 2.5 for WordPress Remote Code Execution","vendor":"themexa"}