WordPress File Manager plugin contains a remote code execution vulnerability that allows unauthenticated users to execute PHP code and upload malicious files on a target site.
Source: NVD ↗ · CISA KEV Catalog ↗