Login Sign Up

CVE-2024-5598

7.5 HIGH

📋 TL;DR

The Advanced File Manager WordPress plugin exposes sensitive files to unauthenticated attackers through a vulnerable function. This allows extraction of backups and other confidential data from the Trash folder. All WordPress sites using this plugin up to version 5.2.4 are affected.

💻 Affected Systems

Products:
  • Advanced File Manager WordPress Plugin
Versions: All versions up to and including 5.2.4
Operating Systems: Any OS running WordPress
Default Config Vulnerable: ⚠️ Yes
Notes: Vulnerability exists when plugin is active; requires files to be in Trash folder for exposure.

📦 What is this software?

Advanced File Manager by Advancedfilemanager

View all CVEs affecting Advanced File Manager →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Attackers download database backups containing credentials, PII, or encryption keys, leading to full site compromise and data breaches.

🟠

Likely Case

Unauthenticated attackers access sensitive configuration files, backup archives, or uploaded files containing business information.

🟢

If Mitigated

Limited exposure if no sensitive files exist in the Trash folder, but the vulnerability still provides unauthorized file access.

🌐 Internet-Facing: HIGH
🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No
Weaponized: LIKELY
Unauthenticated Exploit: ⚠️ Yes
Complexity: LOW

Simple HTTP request to vulnerable endpoint; no authentication required.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: 5.2.5

Vendor Advisory: https://plugins.trac.wordpress.org/changeset/3107587/

Restart Required: No

Instructions:

1. Log into WordPress admin panel. 2. Navigate to Plugins → Installed Plugins. 3. Find 'Advanced File Manager' and click 'Update Now'. 4. Verify version is 5.2.5 or higher.

🔧 Temporary Workarounds

Disable Plugin

all

Temporarily deactivate the Advanced File Manager plugin until patched.

wp plugin deactivate file-manager-advanced

Block Vulnerable Endpoint

linux

Use web server or WAF to block access to the vulnerable function.

# Apache: RewriteRule ^.*fma_local_file_system.*$ - [F]
# Nginx: location ~* fma_local_file_system { deny all; }

🧯 If You Can't Patch

  • Disable the Advanced File Manager plugin immediately.
  • Implement strict file access controls and monitor for unauthorized file access attempts.

🔍 How to Verify

Check if Vulnerable:

Check WordPress admin → Plugins → Advanced File Manager version. If version ≤5.2.4, vulnerable.

Check Version:

wp plugin get file-manager-advanced --field=version

Verify Fix Applied:

Confirm plugin version is 5.2.5 or higher in WordPress admin panel.

📡 Detection & Monitoring

Log Indicators:

  • HTTP requests containing 'fma_local_file_system' parameter
  • Unusual file access patterns from unauthenticated users

Network Indicators:

  • GET/POST requests to WordPress endpoints with file access parameters

SIEM Query:

source="web_logs" AND uri="*fma_local_file_system*"

📊 Metadata

CVE ID: CVE-2024-5598
CVSS v3 Score: 7.5 (HIGH)
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published: June 29, 2024
Last Updated: November 21, 2024

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON