CVE-2020-35235

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 18.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-12-14 · updated 2026-06-17

Description

vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access control. Thus, any authenticated user can run the elFinder upload command to achieve remote code execution. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

Themexa Secure File Manager: through 2.5

References

https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/
https://wordpress.org/plugins/secure-file-manager/#developers
https://blog.nintechnet.com/authenticated-rce-vulnerability-in-wordpress-secure-file-manager-plugin-unpatched/
https://wordpress.org/plugins/secure-file-manager/#developers

Get alerted when CVE-2020-35235 or the next vulnerability affects your stack