CVE-2026-17540

The CVE concerns the WordPress File Manager plugin prior to version 6.9.1. The issue is improper authorization for file management commands, enabling any authenticated user (e.g., a subscriber) to read and delete arbitrary files within the WordPress installation directory. This could lead to disc...