OpenSec Atlas

wp-file-manager-CVE-2020-25213: An Open Source Script for Application Security | OpenSec Atlas

Application Security

Script

wp-file-manager-CVE-2020-25213

A script to exploit the unauthenticated arbitrary file upload vulnerability (CVE-2020-25213) in WP-file-manager WordPress plugin versions below 6.9.

View on GitHub

About This Tool

https://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8

Primary Use Case

This tool is used by security researchers and penetration testers to verify and demonstrate the exploitation of the CVE-2020-25213 vulnerability in WP-file-manager WordPress plugins. It helps assess whether a WordPress site is vulnerable to arbitrary file upload attacks that could lead to full system compromise. The tool can also be used to automate vulnerability checks and proof-of-concept exploits.

Key Features

Exploits unauthenticated arbitrary file upload vulnerability in WP-file-manager plugin (<6.9)
Checks for vulnerable endpoints without uploading files
Uploads arbitrary files to the target WordPress site
Verbose mode to display underlying curl commands
Simple CLI script with clear usage switches
Includes detailed usage instructions and screenshots
Open source and easy to customize for testing

Insights & Recommendations

This tool is intended for authorized security testing only; unauthorized use may cause legal issues and damage. The author disclaims responsibility for misuse. Users should obtain written consent before exploiting any target. The tool is based on public vulnerability disclosures and is designed to help understand exploit development.

Installation

git clone https://github.com/mansoorr123/wp-file-manager-CVE-2020-25213.git
chmod +x wp-file-manager-CVE-2020-25213/wp-file-manager-exploit.sh

Usage

./wp-file-manager-exploit.sh --wp_url https://www.example.com/wordpress --check

Checks if the target WordPress site has the vulnerable endpoint and fingerprint without uploading any file.

./wp-file-manager-exploit.sh --wp_url https://wordpress.example.com/ -f /tmp/php_hello.php --verbose

Uploads the specified local file (/tmp/php_hello.php) to the target WordPress site with verbose output showing the curl command executed.

Smart Usage Notes

Integrate this script into penetration testing toolkits to automate vulnerability verification for WP-file-manager plugin.Use the tool in controlled purple team exercises to simulate real-world exploitation and improve detection capabilities.Leverage verbose mode outputs to develop custom IDS/IPS signatures targeting this specific exploit activity.Incorporate the script in CI/CD security pipelines to detect vulnerable plugin versions before deployment.Combine with web application firewalls (WAF) tuning to reduce false negatives in detecting arbitrary file upload attempts.