WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
file-away
Published
2025-03-19
Title
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read
Slug
file-gallery
Published
2014-08-01
Title
File Gallery 1.7.9 - Settings Page create_function Function Remote Comm& Execution
Slug
file-gallery
Published
2023-04-19
Title
File Gallery < 1.8.5.4 - Contributor+ Stored XSS
Slug
file-gallery
Published
2023-11-28
Title
File Gallery <= 1.8.5.4 - Reflected Cross-Site Scripting via post_id
Slug
file-groups
Published
2014-08-01
Title
File Groups <= 1.1.2 - SQL Injection
Slug
file-icons
Published
2025-02-21
Title
File Icons <= 2.1 - Reflected Cross-Site Scripting
Slug
file-manager
Published
2017-03-01
Title
File Manager <= 4.1.4 - Cross-Site Request Forgery (CSRF) Arbitrary File Upload
Slug
file-manager
Published
2018-03-02
Title
File Manager < 5.0.2 - Information Disclosure
Slug
file-manager
Published
2022-03-14
Title
Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Slug
file-manager
Published
2023-11-20
Title
File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal
Slug
file-manager
Published
2024-09-04
Title
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
Slug
file-manager
Published
2024-09-09
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
file-manager
Published
2024-10-04
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.5.8 - Authenticated (Subscriber+) Limited JavaScript File Upload
Slug
file-manager
Published
2025-06-02
Title
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress < 6.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads
Slug
file-manager-advanced
Published
2023-08-14
Title
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
Slug
file-manager-advanced
Published
2024-06-28
Title
Advanced File Manager < 5.2.5 - Sensitive Information Exposure via Directory Listing
Slug
file-manager-advanced
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Subscriber+) Limited File Upload
Slug
file-manager-advanced
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
file-manager-advanced
Published
2024-09-25
Title
Advanced File Manager < 5.2.9 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Slug
file-manager-advanced
Published
2024-12-02
Title
Advanced File Manager < 5.2.11 - Subscriber+ Arbitrary File Upload
Slug
file-manager-advanced
Published
2025-01-16
Title
Advanced File Manager 5.2.12 - 5.2.13 - Subscriber+ Arbitrary File Upload
Slug
file-manager-advanced
Published
2025-03-06
Title
Advanced File Manager < 5.3.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Slug
file-manager-advanced
Published
2025-05-07
Title
Advanced File Manager < 5.3.2 - Missing Authorization to Notice Dismisaal
Slug
file-manager-advanced
Published
2025-08-12
Title
Multiple elFinder Plugins - Arbitrary File Deletion via Traversal
Slug
file-manager-advanced-shortcode
Published
2023-05-31
Title
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode