CVE-2023-3814

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-381405.5Windows Kernel Information Disclosure VulnerabilityCVE-2023-381417.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381427.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381437.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-381447.8Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-381468.8Windows Themes Remote Code Execution VulnerabilityCVE-2023-381478.8Windows Miracast Wireless Display Remote Code Execution VulnerabilityCVE-2023-381488.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-381497.5Windows TCP/IP Denial of Service VulnerabilityCVE-2023-38156.1A vulnerability, which was classified as problematic, has been found in y_project RuoYi up to 4.7.7. Affected by this issue is the function CVE-2023-381507.8Windows Kernel Elevation of Privilege VulnerabilityCVE-2023-381518.8Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability