CVE-2023-3814
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
- State
- Published
- Severity
- 4.9 Medium
- Published
- Sep 4, 2023
- Updated
- Mar 6, 2025
- Reserved
- Jul 20, 2023
Description
The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.9 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Advanced File ManagerUnknown |
|
References
- https://wpscan.com/vulnerability/ca954ec6-6ebd-4d72-a323-570474e2e339exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.