ThreatPress

WordPress Vulnerabilities Database

Back

WordPress WP FileManager Plugin "path" Parameter - Arbitrary File Download

Product
WP FileManager
Description
WP FileManager plugin's "path" parameter is prone to an arbitrary file download vulnerability. It allows an attacker to download arbitrary files within the context of the web server process.
Solution
Update the plugin.
Classification
Type Arbitrary File Download
References
Exploit-DB
CVE
Name CVE-N/A
Versions
Affected In <= 1.0
Fixed In 1.1
Disclosure date
2013-05-15
Credits
ByEge