CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a through 5.2.7.
Explanation of Vulnerability in Simple Terms
The Bit File Manager WordPress plugin versions up to 5.2.7 contain a deserialization vulnerability in how it processes untrusted data. An authenticated administrator with high privileges can craft malicious serialized input to trigger unintended code execution or data manipulation. The vulnerability requires specific conditions to exploit and has limited scope, but site owners should update immediately to prevent privilege abuse.
What an attacker can do
An authenticated admin can deserialize malicious data to execute unintended code or modify site data.
Potential impact on your site
A compromised admin account could be used to execute code or alter site data through this plugin vulnerability.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site and craft specific serialized input.
Key dates
External resources
Related vulnerabilities
