← Database

CVE-2025-15433

MEDIUM CVSS: 6.8 Published: 2026-03-26 Modified: 2026-06-17

Description

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector

Affected Platforms

Unknown

Weakness Type

Unknown

References