Executive brief
Shared Files Pro is a WordPress plugin that manages file sharing on websites. The plugin fails to validate file paths when creating featured images, allowing anyone on the internet to read sensitive files from the server (like configuration files containing passwords) and view their contents through a public URL, bypassing authentication entirely.
Technical details
The vulnerability is a path traversal / arbitrary file read flaw in the featured image creation functionality. The plugin does not validate or sanitize the file path parameter supplied by users, permitting unauthenticated attackers to traverse the filesystem and read arbitrary files. An attacker can exploit this to access sensitive files from the server and republish their contents at a public URL, enabling information disclosure. The vulnerability affects all versions of Shared Files Pro before 1.7.70, and no authentication is required to exploit it. A patch is available in version 1.7.70 and later.
Affected products
- WP Fiesta Shared Files Pro before 1.7.70
Timeline
- 2026-08-26: disclosed
- 2026-08-28: patched: Fixed in version 1.7.70