AD
Vendor
Advancedfilemanager
11
CVEs
0
On KEV
0
New 30D
Products
AF9.8
Advanced File Manager
Advancedfilemanager
9 CVEs0 on KEV0 new
FM9.8
File Manager Advanced Shortcode
Advancedfilemanager
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-47688 | AF Advanced File Manager Advancedfilemanager | 9.8 | May 7 | WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability |
| CVE-2024-13805 | AF Advanced File Manager Advancedfilemanager | 5.4 | Mar 7 | Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload |
| CVE-2024-13333 | AF Advanced File Manager Advancedfilemanager | 7.5 | Jan 17 | Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-11391 | AF Advanced File Manager Advancedfilemanager | 7.5 | Dec 3 | Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-8725 | AF Advanced File Manager Advancedfilemanager | 5.4 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload |
| CVE-2024-8126 | AF Advanced File Manager Advancedfilemanager | 8.8 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-8704 | AF Advanced File Manager Advancedfilemanager | 7.2 | Sep 26 | Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale |
| CVE-2023-7061 | FM File Manager Advanced Shortcode Advancedfilemanager | 8.8 | Jul 10 | Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload |
| CVE-2024-5598 | AF Advanced File Manager Advancedfilemanager | 7.5 | Jun 29 | Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing |
| CVE-2023-3814 | AF Advanced File Manager Advancedfilemanager | 4.9 | Sep 4 | The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary… |
| CVE-2023-2068 | FM File Manager Advanced Shortcode Advancedfilemanager | 9.8 | Jun 27 | The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode |