CVE-2020-25213Vulnerability
WordPress File Manager Plugin Remote Code Execution Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Sekoia.io · last reported
Last reported 4 months ago
CISA KEVAdded 3 Nov 2021
Fix due 3 May 2022
Used by ransomware: not knownCISA KEV catalogue
Fix due 3 May 2022
Used by ransomware: not knownCISA KEV catalogue
EPSS97.3%
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 21 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
ErrTraffic: A Growing ClickFix Malware Distribution Framework“Step2 – CVE-2020-25213 exploitation attempted”
Indicators reported together
named in the same reports- flare[.]ioin 1 report
- chatgpt-web[.]vipin 1 report
- llc-image-ico[.]clickin 1 report
- 96.178.187[.]175in 1 report
- 96.181.156[.]219in 1 report
- 172.59.242[.]93in 1 report
- 68.60.174[.]238in 1 report
- a3f8b2c1d4e5f607…930a1b2c3d4ein 1 report
- be61936de03f3842ee814fd80a10233ain 1 report
- webanalytics-cdn[.]sbsin 1 report
- antigravity[.]studyin 1 report
- defi-xstocks[.]vipin 1 report
Copy these 12 indicators · defanged
Thanks — we review every report.