Threats tagged 'ghsa-g4xh-fpq4-34j5'

A vulnerability in The Security Plugin, Firewall & Malware Scanner with Auto Removal WordPress plugin before version 2.191 allows non-super-admin administrators, including subsite administrators on multisite installations, to access the File System Watcher file viewer without proper restrictions. This exposure enables them to read sensitive tracked files such as the main configuration file, disclosing authentication keys, salts, and database credentials.