File Manager

8 CVEs across 1 File Manager products. Browse File Manager vulnerabilities, severities, and proof-of-concept exploits.

File Manager products with known CVEs

ProductCVEs
File Manager Pro8
File Manager CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-0818Medium6.52025-08-13Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauth…
CVE-2024-8918High7.42024-10-16The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 8.3.9. This is due to a lack of…
CVE-2024-8746High7.52024-10-16The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mk_file_fol…
CVE-2024-8507High8.82024-10-16The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9. This is due to missing or in…
CVE-2024-7559High8.82024-08-23The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and capability checks in the mk_file_fold…
CVE-2023-7015Medium6.12024-03-13The File Manager Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tb' parameter in all versions up to, and including, 8.3.4 du…
CVE-2023-6825Critical9.92024-03-13The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7.2.1 (free version)…
CVE-2023-6846High8.82024-02-05The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_s…