8.8 High

CVE-2023-7062 The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to,…

Description

The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the server, which can contain sensitive information.

Affected products and versions

Product	Affected versions	Fixed in
Advanced File Manager Shortcodes 2.4	earliest → 2.4	No fix stated

The 2 CVEs of Advanced File Manager Shortcodes →

CVE-2023-7061 The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to,… 8.8 High

Do you use Advanced File Manager Shortcodes?

Track this CVE Watch Advanced File Manager Shortcodes Check my SBOMs

www.cveye.io/en/cve/CVE-2023-7062

Timeline

Published July 10, 2024
Last modified April 8, 2026

References

www.wordfence.com www.wordfence.com
advancedfilemanager.com advancedfilemanager.com

Track this CVE

CVE-2023-7062 The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to,…

Description

Affected products and versions

Other CVEs of Advanced File Manager Shortcodes