Sensitive Information Exposure Vulnerability Affects Advanced File Manager Plugin

CVE-2024-5598

Summary

The Advanced File Manager plugin for WordPress is susceptible to a vulnerability that allows unauthenticated attackers to exploit the 'fma_local_file_system' function. This flaw could lead to the unauthorized extraction of sensitive information, including backup files, especially when data has been relocated to the built-in Trash folder. It is crucial for users of the affected versions to assess their systems and implement necessary security measures to mitigate potential risks.

References