https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:19:50.000142+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-0761 CVE-2024-0761 — File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames 2026-10-04T19:19:50.020890+00:00

Affected: mndpsingh287 File Manager

The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for unauthenticated attackers, to extract sensitive data including site backups in configurations where the .htaccess file in the directory does not block access.