Missing Authorization in WPExperts Advanced File Manager Affects User Access Control

CVE-2026-110365

What is CVE-2026-110365?

A missing authorization vulnerability has been identified in the WPExperts Advanced File Manager plugin, which allows for the exploitation of incorrectly configured access control security levels. This issue affects versions of the Advanced File Manager plugin from n/a through 5.4.14, potentially enabling unauthorized users to gain access to sensitive files or functionalities that should be protected. Users and administrators are advised to update their plugin to mitigate the risks associated with this flaw.

References