CVE-2024-13333

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fmalocalfilesystem' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above and upload...

PT-2025-2119

Name of the Vulnerable Software and Affected Versions Advanced File Manager plugin for WordPress versions 5.2.12 through 5.2.13 Description The issue is related to arbitrary file uploads due to missing file type validation in the fma local file system function. This allows authenticated attackers...