AF
Product
Advanced File Manager
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 3Low 0
Watch
Add Advanced File Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-47688 | 9.8 | May 7 | WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability Affected: before 5.3.2 |
| CVE-2024-8126 | 8.8 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload Affected: before 5.2.9 |
| CVE-2024-13333 | 7.5 | Jan 17 | Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload Affected: 5.2.12 before 5.2.14 |
| CVE-2024-11391 | 7.5 | Dec 3 | Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload Affected: before 5.2.11 |
| CVE-2024-5598 | 7.5 | Jun 29 | Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing Affected: before 5.2.5 |
| CVE-2024-8704 | 7.2 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale Affected: before 5.2.9 |
| CVE-2024-13805 | 5.4 | Mar 7 | Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload Affected: before 5.3.0 |
| CVE-2024-8725 | 5.4 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload Affected: before 5.2.9 |
| CVE-2023-3814 | 4.9 | Sep 4 | The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary… Affected: before 5.1.1 |
Showing 9