A critical vulnerability in the shared-files-pro WordPress plugin allows unauthenticated attackers to read arbitrary files from the server, posing a significant risk to data confidentiality.

The plugin suffers from an External Control of File Name or Path (CWE-73) flaw. Unauthenticated attackers can supply malicious file paths during the featured image creation process to access sensitive server files and expose their contents publicly.

Successful exploitation of this vulnerability permits unauthorized access to sensitive configuration files, credentials, or system data. With a CVSS score of 7.5, this high-severity flaw can lead to severe data breaches and total compromise of the application environment. The ability for unauthenticated actors to retrieve server-side files without prior knowledge or credentials represents a major threat to organizational security.

Immediate Action: Update the shared-files-pro WordPress plugin to version 1.7.70 or later immediately.

Proactive Monitoring: Review web server access logs for anomalous requests targeting the featured image upload functionality or unusual file path patterns.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block directory traversal attempts and suspicious file path input strings directed at the plugin endpoints.

Public Exploit Available: No

Given the high CVSS score and the potential for unauthorized data access, administrators must prioritize this update. Ensure that all instances of the shared-files-pro plugin are patched to version 1.7.70 to eliminate the risk of arbitrary file reading. If immediate patching is not possible, consider disabling the plugin until the update can be applied.