FM
Product
File Manager
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 5Low 0
Watch
Add File Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2654 | 6.8 | Apr 9 | File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal Affected: before 7.2.6 |
| CVE-2018-16967 | 6.1 | Apr 15 | There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter Affected: 3.0 |
| CVE-2024-8918 | 5.4 | Oct 16 | File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload Affected: before 8.3.10 |
| CVE-2021-24177 | 5.4 | Apr 5 | In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a… Affected: before 7.1 |
| CVE-2018-16363 | 5.4 | Sep 7 | The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in… Affected: 2.9 |
Showing 5