CVE-2023-6846

The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_syntax AJAX function. This makes it possible for authenticated attackers, with subscriber access and above, to execute code on the server. Version 8.3.5 introduces a capability check that prevents users lower than admin from executing this function.

• CWE-94
• CWE-434

• https://gist.github.com/Kun19/046b2b305cac5f2edd38037984c2e8e3Exploit
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1e8e0257-a745-495f-a103-c032b95209fc?source=cveThird Party Advisory
• https://gist.github.com/Kun19/046b2b305cac5f2edd38037984c2e8e3Exploit
• https://www.wordfence.com/threat-intel/vulnerabilities/id/1e8e0257-a745-495f-a103-c032b95209fc?source=cveThird Party Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6840An issue has been discovered in GitLab EE affecting all vers…6.7
• CVE-2023-6841A denial of service vulnerability was found in keycloak wher…7.5
• CVE-2023-6842The Formidable Forms – Contact Form, Survey, Quiz, Payment, …4.8
• CVE-2023-6843The easy.jobs- Best Recruitment Plugin for Job Board Listing…4.3
• CVE-2023-6844The iframe plugin for WordPress is vulnerable to Stored Cros…5
• CVE-2023-6845The CommentTweets WordPress plugin through 0.6 does not have…8.8
• CVE-2023-6847An improper authentication vulnerability was identified in G…7.5
• CVE-2023-6848A vulnerability was found in kalcaddle kodbox up to 1.48. It…9.8
• CVE-2023-6849A vulnerability was found in kalcaddle kodbox up to 1.48. It…9.8
• CVE-2023-6850A vulnerability was found in kalcaddle KodExplorer up to 4.5…9.8
• CVE-2023-6851A vulnerability was found in kalcaddle KodExplorer up to 4.5…9.8
• CVE-2023-6852A vulnerability classified as critical has been found in kal…9.8