title: Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar ext
description: The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system to execute commands and fully compromise the server on behalf of a user with Author-level privileges.
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
vendor: Unknown
product: Filr
versions:
status: affected, versionType: semver, version: 0, lessThan: 1.2.3.6
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}