CVE-2026-17542

The File Manager WordPress plugin (versions before 6.9.1 ) contains a vulnerability in the bitapps_fm_connector endpoint. Due to a missing capability check , any authenticated user, such as a subscriber , can browse the entire WordPress installation directory. This allows attackers to download sp...

PT-2026-69367

Name of the Vulnerable Software and Affected Versions File Manager versions prior to 6.9.1 Description An issue exists where a capability check is missing on the bitapps fm connector endpoint. This allows any authenticated user, including those with subscriber-level privileges, to browse the enti...