FI
Vendor
Filemanagerpro
17
CVEs
1
On KEV
0
New 30D
Products
FM9.8
File Manager
Filemanagerpro
14 CVEs1 on KEV0 new
FM8.8
File Manager Pro
Filemanagerpro
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8507 | FM File Manager Filemanagerpro | 8.8 | Oct 16 | File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload |
| CVE-2018-25105 | FM File Manager Filemanagerpro | 9.8 | Oct 16 | File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download |
| CVE-2024-8746 | FM File Manager Filemanagerpro | 8.8 | Oct 16 | File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload |
| CVE-2024-8918 | FM File Manager Filemanagerpro | 5.4 | Oct 16 | File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload |
| CVE-2024-7559 | FM File Manager Pro Filemanagerpro | 8.8 | Aug 23 | File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload |
| CVE-2024-2654 | FM File Manager Filemanagerpro | 6.8 | Apr 9 | File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal |
| CVE-2024-1538 | FM File Manager Filemanagerpro | 8.8 | Mar 21 | File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion |
| CVE-2023-6825 | FM File Manager Pro Filemanagerpro | 9.9 | Mar 13 | File Manager And File Manager Pro (Multiple Versions) - Directory Traversal |
| CVE-2024-0761 | FM File Manager Filemanagerpro | 7.5 | Feb 5 | The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup… |
| CVE-2023-6846 | FM File Manager Filemanagerpro | 8.8 | Feb 5 | The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_syntax AJAX function |
| CVE-2021-24177 | FM File Manager Filemanagerpro | 5.4 | Apr 5 | In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a… |
| CVE-2020-25213 In wildKEV | FM File Manager Filemanagerpro | 9.8 | Sep 9 | WordPress File Manager Plugin Remote Code Execution Vulnerability |
| CVE-2020-24312 | FM File Manager Filemanagerpro | 7.5 | Aug 26 | mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file |
| CVE-2018-16967 | FM File Manager Filemanagerpro | 6.1 | Apr 15 | There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter |
| CVE-2018-16966 | FM File Manager Filemanagerpro | 8.8 | Apr 15 | There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter |
| CVE-2018-16363 | FM File Manager Filemanagerpro | 5.4 | Sep 7 | The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request because set_transient is used in… |