Security Advisory
CVE-2025-15433
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector