Threats tagged 'ghsa-w9qj-pq6f-hqr7'

The File Manager WordPress plugin versions from 7.2.2 up to but not including 8.0.5 contain an information exposure vulnerability. Unauthenticated users can download database backup archives, which may be stored under a fixed filename. This can lead to exposure of sensitive data such as user email addresses and password hashes on servers that do not enforce .htaccess protections for the directory.