CVE-2023-6825: Directory Traversal in WordPress File Manager

The directory traversal vulnerability in WordPress File Manager allows an attacker to bypass intended file access restrictions. By manipulating the 'target' parameter within the mkfilefoldermanageractioncallbackshortcode function, an attacker can read files outside of the intended directories. This could expose sensitive configuration files, database credentials, or other confidential data stored on the server. Furthermore, the attacker can upload files to arbitrary locations, potentially overwriting critical system files or injecting malicious code. The free version requires administrator access to exploit the vulnerability, while the Pro version is exploitable without elevated privileges.

1. Reserved2023-12-14
2. Published2024-03-13
3. Modified2024-08-08
4. EPSS updated2026-04-02

The primary mitigation for CVE-2023-6825 is to upgrade to the latest version of the File Manager or File Manager Pro plugin, as the developers have released a patch. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to filter requests containing suspicious characters or patterns in the 'target' parameter. Additionally, restrict file upload permissions and implement strict input validation to prevent attackers from manipulating file paths. Regularly review file system access logs for any unauthorized activity.

Active installs

1.0MNiche

Plugin rating

4.7

Requires WordPress

4.0+

Compatible up to

6.9.4

Requires PHP

5.2.4+