Plugin icon

File Manager Pro – Filester

filester

Vulnerabilities:

10

Last Updated:

May 23, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-08-12
Title
Multiple elFinder Plugins - Arbitrary File Deletion via Traversal
Fixed in
Fixed in 1.9
CVSS
6.5 (medium)
Published
2025-06-19
Title
File Manager Pro < 1.8.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.9
CVSS
4.4 (medium)
Published
2025-06-13
Title
File Manager Pro – Filester < 1.8.9 - Administrator+ Arbitrary File Upload
Fixed in
Fixed in 1.8.9
CVSS
6.6 (medium)
Published
2024-12-18
Title
File Manager Pro – Filester < 1.8.7 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Fixed in
Fixed in 1.8.7
CVSS
4.3 (medium)
Published
2024-11-27
Title
File Manager Pro – Filester < 1.8.6 - Authenticated (Administrator+) Local JavaScript File Inclusion
Fixed in
Fixed in 1.8.6
CVSS
7.2 (high)
Published
2024-11-27
Title
File Manager Pro – Filester < 1.8.7- Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 1.8.7
CVSS
7.5 (high)
Published
2024-08-02
Title
File Manager Pro – Filester < 1.8.3 - Authenticated Plugin Settings Update
Fixed in
Fixed in 1.8.3
CVSS
7.5 (high)
Published
2023-09-19
Title
File Manager Pro < 1.8.1 - Admin+ Remote Code Execution
Fixed in
Fixed in 1.8.1
CVSS
4.7 (medium)
Published
2023-09-19
Title
File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.1
CVSS
3.5 (low)
Published
2023-09-11
Title
File Manager Pro < 1.8 - Remote Code Execution via CSRF
Fixed in
Fixed in 1.8
CVSS
9.6 (critical)