Plugin icon

Wp File Manager Pro

wp-file-manager-pro

Vulnerabilities:

8

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-08-12
Title
Multiple elFinder Plugins - Arbitrary File Deletion via Traversal
Fixed in
Fixed in 8.4.3
CVSS
6.5 (medium)
Published
2024-10-15
Title
File Manager Pro < 8.3.10 - Unauthenticated Limited JavaScript File Upload
Fixed in
Fixed in 8.3.10
CVSS
7.4 (high)
Published
2024-10-15
Title
File Manager Pro < 8.3.10 - Cross-Site Request Forgery to Arbitrary File Upload
Fixed in
Fixed in 8.3.10
CVSS
8.8 (high)
Published
2024-10-15
Title
File Manager Pro < 8.3.10 - Unauthenticated Backup File Download and Upload
Fixed in
Fixed in 8.3.10
CVSS
7.5 (high)
Published
2024-08-22
Title
File Manager Pro < 8.3.8 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 8.3.8
CVSS
8.8 (high)
Published
2024-03-04
Title
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Fixed in
Fixed in 8.3.5
CVSS
9.9 (critical)
Published
2024-02-20
Title
File Manager Pro < 8.3.5 - Reflected Cross-Site Scripting
Fixed in
Fixed in 8.3.5
CVSS
6.1 (medium)
Published
2024-01-24
Title
File Manager Pro < 8.3.5 - Authenticated (Subscriber+) Arbitrary File Upload
Fixed in
Fixed in 8.3.5
CVSS
8.8 (high)