CVE-2026-17541
Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths involved and the name of the user who performed them.
| Vendor | unknown |
| Product | file manager |
| Published | Aug 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown file manager
Be the first to know when new unknown vulnerabilities affecting unknown file manager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / File Manager
0 < 6.9.1
References
Credits
Farid Narimanov WPScan