AF
Product
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8126 | 8.8 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 5.2.8 |
| CVE-2024-11391 | 7.5 | Dec 3 | Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload Affected: through 5.2.10 |
| CVE-2024-5598 | 7.5 | Jun 29 | Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing Affected: through 5.2.4 |
| CVE-2024-8704 | 7.2 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale Affected: through 5.2.8 |
| CVE-2025-0818 | 6.5 | Aug 13 | Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion Affected: through 5.3.6 |
| CVE-2026-15009 | 6.1 | Aug 16 | Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter Affected: through 5.4.12 |
| CVE-2024-13805 | 5.4 | Mar 7 | Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload Affected: through 5.2.14 |
| CVE-2024-8725 | 5.4 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload Affected: through 5.2.8 |
Showing 8