CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for unauthenticated attackers, to extract sensitive data including site backups in configurations where the .htaccess file in the directory does not block access.
Explanation of Vulnerability in Simple Terms
File Manager versions up to 7.2.1 contain a use of insufficiently random values (CWE-330) that allows attackers to bypass security controls. An attacker can exploit this over the network without authentication or user interaction to read sensitive data, modify files, or disrupt service. The high attack complexity suggests the exploit requires specific conditions or timing.
What an attacker can do
Read sensitive files, modify or delete content, or disrupt the site without needing to log in.
Potential impact on your site
Attackers could access private files, alter site content, or cause downtime without a valid account.
Conditions required to exploit
Network access to the site; no authentication required, but exploit may require specific timing or conditions.
Key dates
External resources
Related vulnerabilities
