CVE Database /
CVE-2023-40204
CVE · Critical
CVE-2023-40204 — Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager [folders] < 2.9.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-40204
|
Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager [folders] < 2.9.3 |
Unrestricted Upload of File with Dangerous Type |
Critical
9.1
|
< 2.9.3
|
2.9.3 |
2023-08-28 |
—
|
CVE-2023-40204
The Folders plugin for WordPress versions prior to 2.9.3 contains an arbitrary file upload flaw that permits attackers to upload unrestricted file types to a website. An attacker could exploit this to introduce malicious files such as backdoors, which upon execution would grant them deeper access to the site. This security issue was identified by Rafie Muhammad and has been resolved in version 2.9.3 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings