CVE-2025-10744
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-01

Last updated on: 2026-04-08

Assigner: Wordfence

Description
The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and full paths to backup files information contained in the exposed log files.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-01
Last Modified
2026-04-08
Generated
2026-06-16
AI Q&A
2025-10-01
EPSS Evaluated
2026-06-14
NVD
CVE-2025-10744
EUVD
EUVD-2025-31820
Affected Vendors & Products
Showing 4 associated CPEs
Vendor Product Version / Range
managefy backup *
wordpress wordpress *
managefy file_manager *
managefy code_editor *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects the File Manager, Code Editor, and Backup by Managefy plugin for WordPress (up to version 1.6.1). It allows unauthenticated attackers to access sensitive information by viewing publicly exposed log files. These log files contain details such as full file paths and backup file locations, which should not be publicly accessible.

Impact Analysis

The vulnerability can lead to sensitive information exposure, allowing attackers to gain knowledge about the file system structure and backup file locations. This information could be used to facilitate further attacks or unauthorized access to the system.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-10744. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart