Vulnerability Details : CVE-2023-7062
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the server, which can contain sensitive information.
Vulnerability category: Directory traversal
Products affected by CVE-2023-7062
Please log in to view affected product information.
Exploit prediction scoring system (EPSS) score for CVE-2023-7062
0.93%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 75 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-7062
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
Wordfence | 2024-07-10 |
References for CVE-2023-7062
-
https://advancedfilemanager.com/product/file-manager-advanced-shortcode-wordpress/
File Manager Advanced Shortcode Wordpress - Advanced File Manager
-
https://www.wordfence.com/threat-intel/vulnerabilities/id/8bf009f5-cf9e-4d38-9679-d3abb5817d30?source=cve
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
Jump to