CVE-2025-0818

Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion

Severity Score

6.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.

*Credits: Kevin Wydler,tiborisaak

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

Complete

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2025-01-28 CVE Reserved
2025-08-12 CVE Published
2025-08-13 CVE Updated
2025-08-19 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (8)

URL	Tag	Source
https://github.com/Studio-42/elFinder
https://github.com/Studio-42/elFinder/blob/master/php/elFinder.class.php#L5367
https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/library/php/elFinder.class.php#L5411
https://plugins.trac.wordpress.org/browser/filester/trunk/includes/File_manager/lib/php/elFinder.class.php#L5378
https://plugins.trac.wordpress.org/browser/wp-file-manager/trunk/lib/php/elFinder.class.php
https://plugins.trac.wordpress.org/changeset/3319016/filester
https://plugins.trac.wordpress.org/changeset/3335715/file-manager-advanced/trunk/application/library/php/elFinder.class.php
https://www.wordfence.com/threat-intel/vulnerabilities/id/c2a166de-3bdf-4883-91ba-655f2757c53b?source=cve

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Ninjateam Search vendor "Ninjateam"		File Manager Pro – Filester Search vendor "Ninjateam" for product "File Manager Pro – Filester"				<= 1.8.9 Search vendor "Ninjateam" for product "File Manager Pro – Filester" and version " <= 1.8.9"		en		Affected
Saadiqbal Search vendor "Saadiqbal"		Advanced File Manager – Ultimate WP File Manager And Document Library Solution Search vendor "Saadiqbal" for product "Advanced File Manager – Ultimate WP File Manager And Document Library Solution"				<= 5.3.6 Search vendor "Saadiqbal" for product "Advanced File Manager – Ultimate WP File Manager And Document Library Solution" and version " <= 5.3.6"		en		Affected
Mndpsingh287 Search vendor "Mndpsingh287"		File Manager Search vendor "Mndpsingh287" for product "File Manager"				<= 8.4.2 Search vendor "Mndpsingh287" for product "File Manager" and version " <= 8.4.2"		en		Affected