medium6.8
CVE-2025-15433
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) v…
Impact
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector
Affected products
| Product | Affected versions |
|---|---|
| Shared Files WordPress Plugin | before 1.7.58 |
Versions were read from the advisory text. No structured product data has been published for this record yet.