What happened
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
Affected versions
File Manager Plugin: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 49178WordPress Plugin Wp-FileManager 6.8 - RCEMansoor R2020-12-02VerifiedExploit-DB 51224WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCEBLY2023-04-03VerifiedSploitusWP-MASS-XP1.py is a mass scanner that detects vulnerabilities and performs exploits.w0rmgh4d2026-10-05T10:01:48Verifiedw0rmgh4d/Wordpress---Auto-ExploitWP-MASS-XP1.py is a mass scanner that detects vulnerabilities and performs exploits.w0rmgh4d2026-10-05T10:01:48VerifiedPoC-in-GitHub · mansoorr123/wp-file-manager-CVE-2020-25213https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8★ 59mansoorr1232020-10-10CandidatePoC-in-GitHub · kakamband/WPKillerCVE-2020-25213 Wordpress File Manager 6.7 Plugin 0day exploit★ 1kakamband2020-11-13CandidatePoC-in-GitHub · forse01/CVE-2020-25213-Wordpress★ 0forse012021-02-04CandidatePoC-in-GitHub · 0000000O0Oo/Wordpress-CVE-2020-25213Will write a python script for exploiting this vulnerability★ 00000000O0Oo2021-03-12CandidatePoC-in-GitHub · piruprohacking/CVE-2020-25213★ 0piruprohacking2021-04-03CandidatePoC-in-GitHub · b1ackros337/CVE-2020-25213★ 0b1ackros3372022-05-24CandidatePoC-in-GitHub · BLY-Coder/Python-exploit-CVE-2020-25213Python exploit for RCE in Wordpress★ 6BLY-Coder2023-01-22CandidatePoC-in-GitHub · E1tex/Python-CVE-2020-25213Python Interactive Exploit for WP File Manager Vulnerability. The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php extension.★ 3E1tex2023-08-02CandidatePoC-in-GitHub · Cmadhushanka/wordpress-rce-vapt-cve-2020-25213Educational cybersecurity project demonstrating exploitation and mitigation of CVE-2020-25213 (WordPress File Manager Plugin RCE). Includes malware simulation, VAPT analysis, and security patch implementation in a controlled lab environment.★ 0Cmadhushanka2026-05-09CandidatePoC-in-GitHub · KienHoSD/wp-file-manager-exploit-CVE-2020-25213-with-ZerologonExploit Windows server 2019 vulnerable to Zerologon with Garble, Chisel, wp-file-manager vulnerability (have video demo)★ 0KienHoSD2026-05-10CandidatePoC-in-GitHub · Maalfer/CVE-2020-25213-exploitExploit para explotar la vulnerabilidad CVE-2020-25213 en WPFileManager < 6.9★ 1Maalfer2026-10-14CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.