VULNERABILITY INTELLIGENCE

CVE-2023-3814

CVSS score4.9 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2023-09-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Description

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references