CVE-2026-17541
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 10, 2026
Vendor
unknown
Description
The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them.