CVE-2025-15433

Shared Files < 1.7.58 - Contributor+ Arbitrary File Download PUBLISHED

Description (CNA)

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector

Affected (CNA)

Vendor / product	Versions
Unknown / Shared Files	affected 0 before 1.7.58

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/893667a1-dc8f-476a-ac00-55752fface90/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.