WordPress Plugin wp-FileManager Arbitrary File Disclosure (1.3.0)

Description
  • WordPress Plugin wp-FileManager is prone to an arbitrary file disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view local files in the context of the web server process, which may aid in launching further attacks. WordPress Plugin wp-FileManager version 1.3.0 is vulnerable; other versions may also be affected.
Remediation
  • Update to plugin version 1.4.0 or latest
References