{"api_version":"1","generated_at":"2026-04-23T13:52:22+00:00","cve":"CVE-2023-3814","urls":{"html":"https://cve.report/CVE-2023-3814","api":"https://cve.report/api/cve/CVE-2023-3814.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-3814","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-3814"},"summary":{"title":"CVE-2023-3814","description":"The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.","state":"PUBLIC","assigner":"contact@wpscan.com","published_at":"2023-09-04 12:15:00","updated_at":"2023-11-07 04:19:00"},"problem_types":["CWE-863"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/ca954ec6-6ebd-4d72-a323-570474e2e339","name":"https://wpscan.com/vulnerability/ca954ec6-6ebd-4d72-a323-570474e2e339","refsource":"MISC","tags":[],"title":"Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access WordPress Security Vulnerability","mime":"text/html","httpstatus":"403","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3814","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3814","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"3814","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"advancedfilemanager","cpe5":"advanced_file_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"wordpress","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-3814","ASSIGNER":"contact@wpscan.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-863 Incorrect Authorization"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"Unknown","product":{"product_data":[{"product_name":"Advanced File Manager","version":{"version_data":[{"version_affected":"<","version_name":"0","version_value":"5.1.1"}]}}]}}]}},"references":{"reference_data":[{"url":"https://wpscan.com/vulnerability/ca954ec6-6ebd-4d72-a323-570474e2e339","refsource":"MISC","name":"https://wpscan.com/vulnerability/ca954ec6-6ebd-4d72-a323-570474e2e339"}]},"generator":{"engine":"WPScan CVE Generator"},"source":{"discovery":"EXTERNAL"},"credits":[{"lang":"en","value":"Dmitrii"},{"lang":"en","value":"WPScan"}]},"nvd":{"publishedDate":"2023-09-04 12:15:00","lastModifiedDate":"2023-11-07 04:19:00","problem_types":["CWE-863"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":4.9,"baseSeverity":"MEDIUM"},"exploitabilityScore":1.2,"impactScore":3.6}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:advancedfilemanager:advanced_file_manager:*:*:*:*:*:wordpress:*:*","versionEndExcluding":"5.1.1","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}