Vendor

    File Manager

    14 known vulnerabilities in products by File Manager, 1 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in File Manager
    CriticalCVE-2020-25213

    WordPress File Manager Plugin Remote Code Execution Vulnerability

    In CISA KEV

    		10.0
    HighCVE-2023-6846

    File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload

    also in 1 other product

    		8.8
    HighCVE-2024-1538

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    also in 1 other product

    		8.8
    HighCVE-2020-24312

    WordPress File Manager Plugin: security vulnerability

    		7.5
    CriticalCVE-2018-25105

    File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download

    also in 1 other product

    		9.8
    HighCVE-2024-0761

    File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames

    also in 1 other product

    		8.1
    HighCVE-2018-16966

    WordPress File Manager Plugin: Cross-Site Request Forgery (CSRF)

    		8.8
    MediumCVE-2018-16967

    WordPress File Manager Plugin: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2018-16363

    WordPress File Manager Plugin: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2024-2654

    File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal

    also in 1 other product

    		6.8
    HighCVE-2024-8746

    File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload

    also in 1 other product

    		7.5
    MediumCVE-2021-24177

    WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2024-8507

    File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload

    also in 1 other product

    		8.8
    HighCVE-2024-8918

    File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload

    also in 1 other product

    		7.4

    Products

    Products by File Manager
    File Manager141