CVE-2023-2068 in the critical feed json
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode
published 2023-06-27 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-33594
- cvss
- 9.8
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 39.6%
- EPSS 39.6% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.
Timeline
- First public exploit (Metasploit exploit/multi/http/wp_plugin_fma_shortcode_unauth_rce)
- Published
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- total
- Assessed
- 23 mo ago
Exploit prediction
39.62% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/multi/http/wp_plugin_fma_shortcode_unauth_rce Wordpress File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution through shortcode metasploit exploit, excellent rank, 2023-05-31
- EDB-51505 File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution (RCE) webapps, 2023-06-04
- wpscan.com https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056 referenced PoC, tagged "exploit" by a source, unverified
- packetstormsecurity.com http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Unknown file-manager-advanced-shortcode
Classification
- Technology feeds
References
-
wpscan.com
/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056
exploit, vdb-entry, technical-description, third-party-advisory
-
packetstormsecurity.com
/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.html
exploit, third-party-advisory, vdb-entry
Sources
- CVE List CVE-2023-2068
- NVD CVE-2023-2068
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.