CVE-2023-5105

Summary

CVE-2023-5105 is a newly disclosed vulnerability affecting the Frontend File Manager Plugin for WordPress. This issue permits Editor+ users to bypass the file download logic, enabling them to download sensitive files, such as `wp-config.php`, directly. This vulnerability poses a significant risk to WordPress sites, as `wp-config.php` contains crucial configuration details. The plugin should be updated to version 22.6 or later to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.