The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory, which could lead to the disclosure of the site's configuration secrets and to denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| File Manager Plugin | — | Update file-manager plugin to version 6.9.1, or a newer patched version | Oct 30, 2026 | Aug 4, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub