SophiaX
🔍
LIVE
· New victim: Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... — blacknevas· New victim: Riker Danzig Scherer Hyland & Perretti — SilentRansomGroup· New victim: Hightech Signs — kairos· New victim: Riker Danzig LLP — SilentRansomGroup· New victim: gamaus.com — incransom· New KEV: CVE-2026-72898 · Metabase· New KEV: CVE-2026-20349 · Cisco· New KEV: CVE-2026-68820 · Microsoft· New KEV: CVE-2026-8037 · Progress· New KEV: CVE-2026-63077 · JetBrains· New victim: 3,981 new IOCs ingested in last 24h Portable Intelligence Inc www.portable-intelligence.com serviced by an IT company Computer... — blacknevas· New victim: Riker Danzig Scherer Hyland & Perretti — SilentRansomGroup· New victim: Hightech Signs — kairos· New victim: Riker Danzig LLP — SilentRansomGroup· New victim: gamaus.com — incransom· New KEV: CVE-2026-72898 · Metabase· New KEV: CVE-2026-20349 · Cisco· New KEV: CVE-2026-68820 · Microsoft· New KEV: CVE-2026-8037 · Progress· New KEV: CVE-2026-63077 · JetBrains· 3,981 new IOCs ingested in last 24h
← Vulnerabilities

CVE-2020-25213

⚡ CISA KEV
Published: —Modified: —Vendor: WordPressProduct: File Manager Plugin
—
CVSS v3
97.3%
EPSS
⚡ Added to KEV on 2021-11-03 · Federal agencies must remediate by 2022-05-03
WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
💣 Public Exploits2
From Exploit-DB
WP-file-manager v6.9 - Unauthenticated Arbitrary File Upload leading to RCEphpwebapps✓2023-04-03
WordPress Plugin Wp-FileManager 6.8 - RCEphpwebapps2020-12-02
🔍 Sigma Detection Rules0
Rules tagged with this CVE
No Sigma rules tagged with this CVE.
🛠️ Patch Details0
Affected/fixed versions from threat intel reports
No specific version data extracted yet.
📰 Threat Intel Coverage0
Digest reports mentioning this CVE
No threat intel digest coverage found.
📎 References0
No reference URLs.