CVE-2025-9345

🗓️ 30 Aug 2025 18:19:34Reported by redhat.comType

CVE-2025-9345: Path traversal in the Managefy WordPress plugin via ajax_downloadfile() up to version 1.4.8 enables authenticated subscribers and above to access outside the target directory.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-9345	30 Aug 202521:02	–	circl
CNNVD	WordPress plugin File Manager, Code Editor, and Backup by Managefy 路径遍历漏洞	28 Aug 202500:00	–	cnnvd
CVE	CVE-2025-9345	28 Aug 202503:42	–	cve
Cvelist	CVE-2025-9345 File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download	28 Aug 202503:42	–	cvelist
EUVD	EUVD-2025-25956	3 Oct 202520:07	–	euvd
NVD	CVE-2025-9345	28 Aug 202504:16	–	nvd
Patchstack	WordPress File Manager, Code Editor, and Backup by Managefy plugin <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download vulnerability	27 Aug 202523:47	–	patchstack
Positive Technologies	PT-2025-34963	28 Aug 202500:00	–	ptsecurity
Vulnrichment	CVE-2025-9345 File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download	28 Aug 202503:42	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (August 25, 2025 to August 31, 2025)	4 Sep 202515:25	–	wordfence