WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
file-manager-advanced
Published
2026-08-17
Title
Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
Slug
file-manager-advanced
Published
2026-10-16
Title
Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution < 6.0.0 - Missing Authorization
Slug
file-manager-advanced
Published
2026-10-19
Title
Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass
Slug
file-manager-advanced-shortcode
Published
2023-05-31
Title
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode
Slug
file-manager-advanced-shortcode
Published
2024-07-08
Title
Advanced File Manager Shortcode < 2.5.4 - Authenticated (Contributor+) Arbitrary File Upload
Slug
file-manager-advanced-shortcode
Published
2024-07-08
Title
Advanced File Manager Shortcodes < 2.4.1 - Authenticated (Contributor+) Directory Traversal
Slug
file-manager-advanced-shortcode
Published
2025-05-14
Title
File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode
Slug
file-manager-plugin-for-wordpress
Published
2025-06-27
Title
File Manager Plugin For Wordpress <= 7.5 - Authenticated (Admin+) Arbitrary File Upload
Slug
file-media-renamer
Published
2026-10-03
Title
File Media Renamer <= 1.3 - Author+ Arbitrary File Rename via save-attachment-compat
Slug
file-provider
Published
2025-05-14
Title
File Provider <= 1.2.3 - Unauthenticated SQLi
Slug
file-provider
Published
2025-05-14
Title
File Provider <= 1.2.3 - Item Deletion via CSRF
Slug
file-renaming-on-upload
Published
2023-05-25
Title
File Renaming on Upload < 2.5.2 - Admin+ Stored Cross-Site Scripting
Slug
file-select-control-for-elementor
Published
2024-11-08
Title
File Select Control For Elementor <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
file-upload-to-order
Published
2026-10-12
Title
File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion
Slug
file-upload-types
Published
2024-10-24
Title
File Upload Types by WPForms < 1.5.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
file-uploader-for-woocommerce
Published
2025-12-19
Title
File Uploader for WooCommerce < 1.0.4 - Unauthenticated Arbitrary File Upload via add-image-data
Slug
file-uploader-for-woocommerce
Published
2026-03-23
Title
File Uploader for WooCommerce <= 1.0.4 - Unauthenticated Path Traversal
Slug
filebird
Published
2021-06-16
Title
Filebird 4.7.3 - Unauthenticated SQL Injection
Slug
filebird
Published
2024-01-19
Title
FileBird < 5.6.1 - Admin+ Stored XSS
Slug
filebird
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Stored XSS
Slug
filebird
Published
2024-04-16
Title
FileBird < 5.6.4 - Author+ Users Folder Deletion
Slug
filebird
Published
2024-12-02
Title
Filebird < 6.3.4 - Missing Authorization
Slug
filebird
Published
2025-02-23
Title
Filebird < 6.4.6 - Authenticated (Author+) Insecure Direct Object Reference
Slug
filebird
Published
2025-08-05
Title
FileBird – WordPress Media Library Folders & File Manager < 6.4.9 - Authenticated (Author+) SQL Injection
Slug
filebird
Published
2025-10-17
Title
FileBird < 6.5.0 - Author+ Settings Reset