CVE-2024-5598
EUVD-2024-4678329.06.2024, 05:15
The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive information if the files have been moved to the built-in Trash folder.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| advancedfilemanager | advanced_file_manager | 𝑥 < 5.2.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| advancedfilemanager | advanced_file_manager | 𝑥 ≤ 5.2.4 | ADP |
References