title: File Manager Pro < 1.8.1 - Admin+ Remote Code Execution
description: The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
vendor: Unknown
product: File Manager Pro
versions:
status: affected, versionType: custom, version: 0, lessThan: 1.8.1
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}