CVE-2025-15433 — Shared Files < 1.7.58 - Contributor+ Arbitrary File Download
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path travers…
Published: 2026-03-26 · CVSS: 6.8 · CVSS 3.1
The Shared Files WordPress plugin before 1.7.58 allows users with a role as low as Contributor to download any file on the web server (such as wp-config.php) via a path traversal vector
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7