Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/10/02 3:50 a.m.2 views

CVE-2025-10744

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and...

5.3CVSS6AI score0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/01 3:25 a.m.7 views

CVE-2025-10744 File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and...

5.9CVSS0.00064EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/01 3:25 a.m.3 views

CVE-2025-10744 File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and...

5.9CVSS5.6AI score0.00064EPSS
Exploits0References4
CVE
CVE
added 2025/10/01 3:25 a.m.12 views

CVE-2025-10744

The CVE concerns the WordPress plugin File Manager, Code Editor, and Backup by Managefy (versions up to 1.6.1). Publicly exposed log files allow unauthenticated attackers to view sensitive details, including full file paths and backup file locations. Technical details in connected sources confirm...

5.9CVSS5.6AI score0.00064EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/10/01 12:0 a.m.2 views

WordPress plugin File Manager, Code Editor, and Backup by Managefy 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform has the ability to host a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosu...

5.3CVSS5.8AI score0.00064EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/01 12:0 a.m.4 views

PT-2025-40060

Name of the Vulnerable Software and Affected Versions The File Manager, Code Editor, and Backup by Managefy plugin for WordPress versions prior to 1.6.2 Description The plugin is susceptible to a sensitive information exposure issue due to publicly exposed log files. This allows unauthenticated...

5.3CVSS6.6AI score0.00064EPSS
Exploits0References8
Patchstack
Patchstack
added 2025/09/30 9:41 p.m.6 views

WordPress File Manager, Code editor, backup by Managefy plugin <= 1.6.1 - Unauthenticated Information Exposure vulnerability

Unauthenticated Information Exposure vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin File Manager, Code Editor, and Backup by Managefy versions = 1.6.1...

5.3CVSS6.8AI score0.00064EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.1 views

CVE-2025-9345

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajaxdownloadfile function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions ...

4.9CVSS6AI score0.00135EPSS
Exploits0References1
NVD
NVD
added 2025/08/28 4:16 a.m.1 views

CVE-2025-9345

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajaxdownloadfile function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions ...

4.9CVSS0.00135EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/08/28 3:42 a.m.5 views

CVE-2025-9345 File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajaxdownloadfile function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions ...

4.9CVSS0.00135EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.1 views

PT-2025-34963

Name of the Vulnerable Software and Affected Versions: File Manager, Code Editor, and Backup by Managefy plugin for WordPress versions prior to 1.4.9 Description: The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is susceptible to a Path Traversal issue in versions up to...

4.9CVSS5.9AI score0.00135EPSS
Exploits0References7
Patchstack
Patchstack
added 2025/08/27 11:47 p.m.2 views

WordPress File Manager, Code Editor, and Backup by Managefy plugin <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download vulnerability

Authenticated Admin+ Path Traversal to Arbitrary File Download vulnerability discovered by Đỗ Quang Huy in WordPress Plugin File Manager, Code Editor, and Backup by Managefy versions = 1.4.8...

4.9CVSS6.8AI score0.00135EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder