Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-15433

Shared Files < 1.7.58 - Contributor+ Arbitrary File Download

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Shared Files

Default version status: unaffected

  • 0 to < 1.7.58affected

References