Approved changes feed: RSS · Atom

cpe:2.3:a:softdiscover:file_manager,_code_editor,_and_backup_by_managefy:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSoftdiscover (24065762-04b3-517e-a68d-5b401ff5b9a4)
ProductFile Manager, Code Editor, And Backup By Managefy (8ea95cc6-8326-588c-b8ce-835468d37b67)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9345 vulnerable 2026-06-08 07:45:22.322464 File Manager, Code Editor, and Backup by Managefy <= 1.4.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Download
MEDIUM (4.9)
The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory.
Published: 2025-08-28T03:42:45.718Z
Updated: 2026-04-08T17:33:17.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10744 vulnerable 2026-06-08 07:02:27.442647 File Manager, Code editor, backup by Managefy <= 1.6.1 - Unauthenticated Information Exposure
MEDIUM (5.9)
The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and full paths to backup files information contained in the exposed log files.
Published: 2025-10-01T03:25:22.906Z
Updated: 2026-04-08T16:44:47.058Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.