filemanagerpro
Consumer Softwarecommercial
Top products
Latest CVEs
The 14 most recently published vulnerabilities affecting filemanagerpro.
- CVE-2024-8507File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload8.8
- CVE-2018-25105File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download9.8
- CVE-2024-8746File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload7.5
- CVE-2024-8918File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload7.4
- CVE-2024-2654File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal6.8
- CVE-2024-1538File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion8.8
- CVE-2023-6846File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload8.8
- CVE-2024-0761File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames8.1
- CVE-2021-24177WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)5.4
- CVE-2020-25213The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to h...KEV10.0
- CVE-2020-24312mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and ...7.5
- CVE-2018-16967There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.6.1
- CVE-2018-16966There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter.8.8
- CVE-2018-16363The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in file_folder_manager.php ...5.4