The Advanced File Manager WordPress plugin is vulnerable to arbitrary file access and modification by authenticated users, risking full site compromise.

The plugin fails to perform capability checks in AJAX actions, allowing users with any role that has been granted file-manager access to read sensitive configuration files and overwrite non-PHP files on the host server.

With a CVSS score of 8.5, this vulnerability presents a critical threat to the security of the WordPress installation. An attacker who has gained even low-level access can leverage this flaw to extract sensitive configuration data or overwrite system files, which may lead to the total takeover of administrator accounts and the entire web application.

Immediate Action: Update the Advanced File Manager plugin to version 5.4.13 or higher immediately.

Proactive Monitoring: Review web server access logs for anomalous AJAX requests targeting file management endpoints.

Compensating Controls: Utilize a Web Application Firewall (WAF) to block unauthorized requests to the file-manager AJAX handlers and restrict plugin access to strictly necessary user roles.

Public Exploit Available: Yes, a public Proof-of-Concept is available.

The presence of a public proof-of-concept necessitates immediate action. Administrators must update the plugin to the latest version to prevent potential unauthorized access and file manipulation.