Description
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Shared Files | < 1.7.58 | 1.7.58 |
References
- https://wpscan.com/vulnerability/893667a1-dc8f-476a-ac00-55752fface90/ exploit vdb-entry technical-description