WordPress Advanced File Manager < 5.4.13 - Arbitrary File Read

The Advanced File Manager WordPress plugin before 5.4.13 does not perform capability checks in several of its file management AJAX actions, allowing users with any role to which an administrator has granted file-manager access as low as Subscriber to read arbitrary files on the server. id:...

WordPress Advanced File Manager plugin < 6.0.0 - Authenticated Stored XSS vulnerability

Authenticated Stored XSS vulnerability discovered by Karthik Ramakrishnan in WordPress Plugin Advanced File Manager versions 6.0.0...

WordPress Advanced File Manager Authorization Issue Vulnerability

WordPress Advanced File Manager versions 5.4.14 and earlier have a licensing issue vulnerability. This vulnerability stems from the lack of authorization, allowing exploitation through incorrectly configured access control levels...

WordPress Advanced File Manager plugin <= 5.4.14 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Intrudify in WordPress Plugin Advanced File Manager versions = 5.4.14...

WordPress Advanced File Manager Plugin <= 5.2.8 is vulnerable to Path Traversal

Software Advanced File Manager Type Plugin Vulnerable versions = 5.2.8 Fixed in 5.2.9 OWASP Top 10 A1: Broken Access Control Classification Path Traversal CVE CVE-2024-8704 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID 6882269240d3 Credits TANG Cheuk Hei siunam Required...

WordPress Advanced File Manager Plugin < 5.1.1 is vulnerable to Sensitive Data Exposure

Software Advanced File Manager Type Plugin Vulnerable versions 5.1.1 Fixed in 5.1.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3814 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID c11d3f659c9c Credits Dmitrii Required...