-/10CrowdSec Score

Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More - Path Traversal (CVE-2019-25213)

Published on16-10-2024

First seen on01-01-1970

Public ExploitCVSS 9.8/10Vasyltech - Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More

0Exploiting IPs reported

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files such as wp-config.php

Exploitation

Get real-time information about exploitation attempts and actors involved.

Detected IPs

Discover the IPs that targeted this vulnerability across the CrowdSec Network.

・

Common Weakness Enumeration (CWE)

Protection

Find out relevant information to protect your stack against this CVE.

Blocklist

With our advanced worldwide network detection, CrowdSec can provide a list of IPs known for exploiting the vulnerability.

To increase your protection against this CVE, block exploitation attempts with this list of identified actors.