CVE-2023-7062: Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the server, which can contain sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7062?
CVE-2023-7062 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2023-7062?
To fix CVE-2023-7062, update the Advanced File Manager Shortcodes plugin to version 2.5 or later.
Who is affected by CVE-2023-7062?
CVE-2023-7062 affects all versions of the Advanced File Manager Shortcodes plugin for WordPress up to and including version 2.4.
What type of attack does CVE-2023-7062 enable?
CVE-2023-7062 enables a directory traversal attack that allows attackers with contributor access or higher to read arbitrary files on the server.
What are the potential consequences of CVE-2023-7062?
The potential consequences of CVE-2023-7062 include unauthorized access to sensitive information stored in arbitrary files on the server.