Login Request a demo
FM
Product
File Manager
by Filemanagerpro · last CVE Oct 16, 2024
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 7Medium 5Low 0
Severity
All severities14Critical2High7Medium5Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add File Manager to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-8507
8.8
0%
Oct 16
File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
Affected: before 8.3.10
CVE-2024-8746
8.8
1%
Oct 16
File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
Affected: before 8.3.10
CVE-2024-1538
8.8
11%
Mar 21
File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
Affected: before 7.2.5
CVE-2023-6846
8.8
16%
Feb 5
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Affected: through 8.3.4
CVE-2018-16966
8.8
1%
Apr 15
There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter
Affected: 3.0
CVE-2024-0761
7.5
1%
Feb 5
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Affected: through 7.2.1
CVE-2020-24312
7.5
16%
Aug 26
mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file
Affected: through 6.4
Showing 7