Security
فارسی
All products

file-manager

WordPress · Plugin
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path TraversalCVE-2023-5907 file-manager WordPress Low Fix reported
Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Information ExposureCVE-2026-17542 file-manager WordPress Medium Fix reported
Bit File Manager <= 6.9.0 - Unauthenticated File Activity Log DisclosureCVE-2026-17541 file-manager WordPress Medium Fix reported
Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Arbitrary File ReadCVE-2026-17540 file-manager WordPress Medium Fix reported
File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query ParameterCVE-2026-15991 file-manager WordPress High Fix reported
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadsCVE-2025-1725 file-manager WordPress Medium Fix reported
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File UploadCVE-2024-8743 file-manager WordPress Medium Fix reported
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-7770 file-manager WordPress High Fix reported
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race ConditionCVE-2024-7627 file-manager WordPress High Fix reported
Bit File Manager <= 5.0.0 - Information DisclosureCVE-2018-7204 file-manager WordPress High Fix reported
Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload file-manager WordPress High Fix reported
Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object InjectionCVE-2022-47599 file-manager WordPress High Fix reported
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/DeletionCVE-2022-0403 file-manager WordPress High Fix reported