CVE-2023-3814

—

CVSS 3.1

4.9 medium

EPSS

<1%p47

Published

Sep 4, 2023 (Sep 4, 2023)

Modified

Jun 17, 2026

Description

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

Vendors: advancedfilemanager
Products: advanced file manager
Ecosystems: WordPress
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.