← Back

Themexa

themexa

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Secure File Manager
secure_file_manager
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-35235
1Themexa
1Secure File Manager
Jun 17, 2026
Dec 14, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to...Show more
vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less