What is the CVSS score of CVE-2025-10744?

CVE-2025-10744 has a CVSS 3.1 base score of 5.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.1%.

Which versions of Managefy File Manager are affected by CVE-2025-10744?

Organizations using for WordPress is vulnerable to Sensitive Information Exposure in all should be aware of moderate risk from CVE-2025-10744, a information exposure vulnerability rated CVSS 5.3.

How to fix or mitigate CVE-2025-10744?

Within 30 days: Identify affected systems running for WordPress is vulnerable to Sensitive Information Exposur and apply vendor patches as part of regular patch cycle. Review data exposure and access controls.

Managefy File Manager CVE-2025-10744

EUVD-2025-31820 MEDIUM

Information Exposure (CWE-200)

2025-10-01 security@wordfence.com

WordPress Information Disclosure

5.9

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

AC:L overrides vendor AC:H because WordPress plugin log paths are predictable and enumerable; C:H retained because exposed paths enable unauthenticated retrieval of backup archives containing full database credentials.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 25, 2026 - 11:34 vuln.today

EUVD ID Assigned

Mar 13, 2026 - 18:18 euvd

EUVD-2025-31820

CVE Published

Oct 01, 2025 - 04:16 nvd

MEDIUM 5.9

DescriptionCVE.org

The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.1 through publicly exposed log files. This makes it possible for unauthenticated attackers to view information like full paths and full paths to backup files information contained in the exposed log files.

AnalysisAI

Sensitive information exposure in the File Manager, Code Editor, and Backup by Managefy WordPress plugin (all versions ≤1.6.1) allows unauthenticated remote attackers to read publicly accessible log files containing full server-side filesystem paths and backup archive locations. Disclosure of backup file paths is not merely an information leak - if those backup archives are stored within the web root (the default behavior for such plugins), an attacker can directly download the backup and extract a full WordPress database dump including credentials and wp-config.php secrets, escalating the impact well beyond the nominal CWE-200 classification. No public exploit identified at time of analysis; EPSS sits at 0.05% (17th percentile), reflecting limited observed exploitation pressure.

Technical ContextAI

The plugin (WordPress repository slug: softdiscover-db-file-manager, affected through version 1.6.1 per EUVD-2025-31820) exposes operational log files written by two components: the backup controller (backup.php, line 460) and a progress-tracking helper (iprogress.php, line 19). Both components write log entries - including full server-side filesystem paths - to files stored within the plugin's web-accessible directory without any HTTP access restriction. CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) is the root cause class: the application places sensitive operational artifacts in a location reachable by unauthenticated HTTP clients. The failure is architectural - the plugin does not restrict direct HTTP access to its log directory, nor does it use a nonce or authentication check before serving log content.

RemediationAI

Update the File Manager, Code Editor, and Backup by Managefy plugin to a version beyond 1.6.1 - an upstream fix is referenced in WordPress plugin repository changeset 3369101 (https://plugins.trac.wordpress.org/changeset?reponame=&old=3369101%40softdiscover-db-file-manager&new=3369101%40softdiscover-db-file-manager); however, a specific patched release version was not independently confirmed in the available data and should be verified in the WordPress plugin dashboard or repository before updating. As an immediate compensating control, add a web server directive to deny direct HTTP access to the plugin log directory - for Apache, place a Deny from all directive in an .htaccess file under wp-content/plugins/softdiscover-db-file-manager/, and for Nginx, add a location block matching that path with return 403. As a secondary measure, reconfigure the plugin's backup storage destination to a directory outside the web root, which eliminates the risk of backup archive retrieval even if log paths are exposed. Consult the Wordfence advisory at https://www.wordfence.com/threat-intel/vulnerabilities/id/30147e39-af94-4620-870b-71a0a46b7509 for any additional vendor-recommended mitigations. Upstream fix available (PR/commit); released patched version not independently confirmed.