Vulnerability in File Manager

CVE-2026-17542

The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directo…

Affected products

  • Unknown File Manager — versions 0

References