Path Traversal Vulnerability in Managefy File Manager Plugin for WordPress

CVE-2025-9345

What is CVE-2025-9345?

The Managefy File Manager, Code Editor, and Backup plugin for WordPress contains a Path Traversal vulnerability in the ajax_downloadfile() function. This flaw allows authenticated attackers, with Subscriber-level access or higher, to access files outside of the intended directory structure, potentially leading to unauthorized content exposure and manipulation. It is vital for WordPress site administrators using this plugin to apply patches or updates to secure their environments against potential exploits.

References