Plugin icon

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution

file-manager-advanced

Vulnerabilities:

10

Last Updated:

March 18, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-08-12
Title
Multiple elFinder Plugins - Arbitrary File Deletion via Traversal
Fixed in
Fixed in 5.4.0
CVSS
6.5 (medium)
Published
2025-05-07
Title
Advanced File Manager < 5.3.2 - Missing Authorization to Notice Dismissal
Fixed in
Fixed in 5.3.2
CVSS
0.0 (none)
Published
2025-03-06
Title
Advanced File Manager < 5.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 5.3.0
CVSS
6.4 (medium)
Published
2025-01-16
Title
Advanced File Manager 5.2.12 - 5.2.13 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 5.2.14
CVSS
7.5 (high)
Published
2024-12-02
Title
Advanced File Manager < 5.2.11 - Subscriber+ Arbitrary File Upload
Fixed in
Fixed in 5.2.11
CVSS
7.5 (high)
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 5.2.9
CVSS
7.5 (high)
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Subscriber+) Limited File Upload
Fixed in
Fixed in 5.2.9
CVSS
6.8 (medium)
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Fixed in
Fixed in 5.2.9
CVSS
4.7 (medium)
Published
2024-06-28
Title
Advanced File Manager < 5.2.5 - Sensitive Information Exposure via Directory Listing
Fixed in
Fixed in 5.2.5
CVSS
5.3 (medium)
Published
2023-08-14
Title
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
Fixed in
Fixed in 5.1.1
CVSS
6.6 (medium)