What the vulnerability does
01Description
The Code Explorer plugin for WordPress is vulnerable to arbitrary external file reading in all versions up to, and including, 1.4.5. This is due to the fact that the plugin does not restrict accessing files to those outside of the WordPress instance, though the intention of the plugin is to only access WordPress related files. This makes it possible for authenticated attackers, with administrator-level access, to read files outside of the WordPress instance.
Explanation of Vulnerability in Simple Terms
02Summary
Code Explorer versions 1.4.5 and earlier contain an external entity reference vulnerability that allows authenticated administrators to read sensitive files from the server. The vulnerability requires high-level privileges and does not affect data integrity or availability. Administrators should update to a version newer than 1.4.5.
What an attacker can do
03Attacker Capabilities
Read sensitive files from the server filesystem.
Potential impact on your site
04Site Impact
An admin account could be compromised to expose server configuration files and other sensitive data.
Conditions required to exploit
05Prerequisites
Attacker must have administrator-level access to the application.
Key dates
06Disclosure timeline
October 30, 2024
CVE published
April 8, 2026
Record updated
