Description
The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes them under a fixed filename, allowing unauthenticated attackers to retrieve a full database dump including every user's email address and password hash on servers that do not apply the directory's .htaccess file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | File Manager | 7.2.2 – < 8.0.5 | 8.0.5 |
References
- https://wpscan.com/vulnerability/a0cbfd20-7741-44d0-96c4-054a7952f81b/ exploit vdb-entry technical-description