CVE-2023-2068

The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users.

• http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/173735/WordPress-File-Manager-Advanced-Shortcode-2.3.2-Remote-Code-Execution.htmlExploit, Third Party Advisory, VDB Entry
• https://wpscan.com/vulnerability/58f72953-56d2-4d86-a49b-311b5fc58056Exploit, Third Party Advisory

Published

Jun 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20673In vcu, there is a possible memory corruption due to type co…6.7
• CVE-2023-20674In wlan, there is a possible out of bounds read due to a mis…4.4
• CVE-2023-20675In wlan, there is a possible out of bounds read due to a mis…4.4
• CVE-2023-20676In wlan, there is a possible out of bounds read due to a mis…4.4
• CVE-2023-20677In wlan, there is a possible out of bounds read due to a mis…4.4
• CVE-2023-20679In wlan, there is a possible out of bounds read due to a mis…4.4
• CVE-2023-20680In adsp, there is a possible out of bounds write due to impr…6.7
• CVE-2023-20681In adsp, there is a possible out of bounds write due to impr…6.7
• CVE-2023-20682In wlan, there is a possible out of bounds write due to an i…6.7
• CVE-2023-20684In vdec, there is a possible use after free due to a race co…6.4
• CVE-2023-20685In vdec, there is a possible use after free due to a race co…6.4
• CVE-2023-20686In display drm, there is a possible double free due to a rac…6.4