Security
فارسی
All products

file-manager-advanced

WordPress · Plugin
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution < 6.0.0 - Authenticated (Custom Role+) Stored Cross-Site ScriptingCVE-2026-79627 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution <= 5.4.14 - Missing AuthorizationCVE-2026-110365 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager <= 5.4.12 - Missing AuthorizationCVE-2026-11565 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' ParameterCVE-2026-15009 file-manager-advanced WordPress Medium Fix reported
Multiple Plugins <= Multiple Versions - Authenticated Remote Code ExecutionCVE-2026-6382 file-manager-advancedfileorganizer WordPress High Fix reported
Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File DeletionCVE-2025-0818 file-manager-advancedfilester WordPress Medium Fix reported
Advanced File Manager <= 5.3.1 - Missing Authorization to Notice DismisaalCVE-2025-47688 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-13805 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-13333 file-manager-advanced WordPress High Fix reported
Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-11391 file-manager-advanced WordPress High Fix reported
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File UploadCVE-2024-8725 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-8126 file-manager-advanced WordPress High Fix reported
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localeCVE-2024-8704 file-manager-advanced WordPress High Fix reported
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder AccessCVE-2023-3814 file-manager-advanced WordPress Medium Fix reported
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory ListingCVE-2024-5598 file-manager-advanced WordPress High Fix reported