Advanced File Manager <= 5.3.1 is vulnerable to Broken Access Control to Notice Dismissal vulnerability

Unauthenticated

Published
2025-05-06

The Advanced File Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on a function in versions up to, and including, 5.3.1. This makes it possible for unauthenticated attackers to dismiss admin notices.

CVE

https://www.cve.org/CVERecord?id=CVE-2025-47688

CVSS

Score:5.3

Severity:Medium

Version: 5.3.1

There is a patch available in v5.3.2 and we strongly recommend you update to this version as soon as possible.