Lucene search
+L

6 matches found

Patchstack
Patchstack
•added 2026/08/18 8:19 a.m.•13 views

WordPress Advanced File Manager plugin <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter vulnerability

Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter vulnerability discovered by skyv3il in WordPress Plugin Advanced File Manager versions = 5.4.12...

6.1CVSS5.2AI score0.00389EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/16 5:16 a.m.•13 views

CVE-2026-15009

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS0.00389EPSS
SaveExploits0References8
EUVD
EUVD
•added 2026/08/16 4:24 a.m.•14 views

EUVD-2026-59865

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS5.5AI score0.00389EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2026/08/16 4:24 a.m.•10 views

CVE-2026-15009 Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS5.5AI score0.00389EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2026/08/16 4:24 a.m.•47 views

CVE-2026-15009 Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS0.00389EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2026/08/16 12:00 a.m.•48 views

PT-2026-73088

The Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'soundFile' parameter in all versions up to, and including, 5.4.12 due to insufficient input sanitization and output escaping. Th...

6.1CVSS5.5AI score0.00389EPSS
SaveExploits0References9
Rows per page
Query Builder