Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin File Manager Directory Traversal - CVE-2024-2654 - Vulnerability Database
WP Plugin Wp Filemanager

WordPress Plugin File Manager Directory Traversal - CVE-2024-2654

Medium
Reference: CVE-2024-2654
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-2654
Title: WordPress Plugin File Manager Directory Traversal
Overview:

WordPress Plugin File Manager is prone to a directory traversal vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin File Manager version 7.2.5 is vulnerable prior versions may also be affected.