The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for unauthenticated attackers, to extract sensitive data including site backups in configurations where the .htaccess file in the directory does not block access.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Wp File Manager Plugin | — | Update wp-file-manager plugin to version 7.2.2, or a newer patched version | May 15, 2025 | Jan 22, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub