FM
Product
File Manager
On CISA KEVExploited in the wild
14
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 7Medium 5Low 0
Watch
Add File Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8746 | 8.8 | Oct 16 | The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the… Affected: before 8.3.10 |
| CVE-2024-8507 | 8.8 | Oct 16 | The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 8.3.9 Affected: before 8.3.10 |
| CVE-2024-1538 | 8.8 | Mar 21 | The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4 Affected: before 7.2.5 |
| CVE-2023-6846 | 8.8 | Feb 5 | The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.3.4 via the mk_check_filemanager_php_syntax AJAX function Affected: through 8.3.4 |
| CVE-2018-16966 | 8.8 | Apr 15 | There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parameter Affected: 3.0 |
| CVE-2024-0761 | 7.5 | Feb 5 | The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup… Affected: through 7.2.1 |
| CVE-2020-24312 | 7.5 | Aug 26 | mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file Affected: through 6.4 |
Showing 7