Unauthenticated path traversal in the Shared Files plugin allows an attacker to request arbitrary files on the server by manipulating the file path input. The flaw can lead to reading sensitive data such as configuration files, user credentials, or any other file on the server, thereby compromising confidentiality. No direct code execution is provided, but the attacker gains the ability to exhaustively enumerate file paths and potentially leverage the discovered data for further attacks.

The vulnerability affects all installations of the Tammersoft Shared Files WordPress plugin up through and including version 1.7.64. Versions newer than 1.7.64 are not impacted.

The CVSS score of 7.5 denotes a high severity for a remote unauthenticated attack. The EPSS score of less than 1% suggests a low probability that a real-world exploit is currently taking place, and the issue is not listed in the CISA KEV catalog. Exploitation requires sending a crafted HTTP request to the plugin’s file download endpoint with special path characters; no authentication or additional privileges are required.