Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 0.5%
exploitation probability
0.5%top 60% of all CVEs
observed exploitation
nono source reports it
The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · Advanced File Manager