CVERadar

CVE-2024-5598

Medium Severity

Advancedfilemanager

SVRS

30/100

CVSSv3

NA/10

EPSS

0.00353/1

CVE-2024-5598 allows unauthenticated attackers to access sensitive information via the Advanced File Manager plugin for WordPress. This vulnerability exposes files moved to the Trash folder, potentially including backups and other sensitive data. The Advanced File Manager plugin before version 5.2.4 is affected by this information disclosure flaw.

While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a moderate level of risk. Though not critical, the vulnerability allows unauthorized access to sensitive files, making it imperative to update the plugin to the latest version immediately. Successfully exploiting this flaw could lead to data breaches and compromise sensitive user or system data. Therefore, prompt mitigation is advised to protect against potential attacks.

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence

Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.

CREATE FREE ACCOUNT

CVE Details

Access comprehensive CVE information instantly

Real-time Tracking

Subscribe to CVEs and get instant updates

Exploit Analysis

Monitor related APT groups and threats

IOC Tracking

Analyze and track CVE-related IOCs

News

CVE-2024-5598 | Advanced File Manager Plugin up to 5.2.4 on WordPress exposure of information through directory listing

vuldb.com2024-06-28

CVE-2024-5598 | Advanced File Manager Plugin up to 5.2.4 on WordPress exposure of information through directory listing | A vulnerability was found in Advanced File Manager Plugin up to 5.2.4 on WordPress. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to exposure of information through directory listing. This vulnerability was named CVE-2024-5598. The attack can be initiated remotely. There is no exploit

cve-2024-5598

domains

urls

cves

Social Media

CVE

@CVEnew

2024-06-29

CVE-2024-5598 The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_syste… https://t.co/nqlGu0FZrF

Affected Software

Configuration 1

Type	Vendor	Product
App	Advancedfilemanager	advanced_file_manager

References

Reference	Link
[email protected]	https://plugins.trac.wordpress.org/browser/file-manager-advanced/trunk/application/class_fma_connector.php#L13
[email protected]	https://plugins.trac.wordpress.org/changeset/3107587/
[email protected]	https://www.wordfence.com/threat-intel/vulnerabilities/id/9d4ff5ed-8857-46b8-942b-ac0f47880a95?source=cve

CWE Details

No CWE details found for this CVE

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence