Advanced File Manager Security Vulnerabilities and Issues — Advanced File Manager CVE List

Lucene search

AdvancedfilemanagerAdvanced File Manager

3 matches found

CVE•added 2025/05/07 3:16 p.m.•43 views

CVE-2025-47688

Missing Authorization vulnerability in Saad Iqbal Advanced File Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Advanced File Manager: from n/a through 5.3.1.

9.8CVSS5.3AI score0.00046EPSS

CVE•added 2025/01/17 6:15 a.m.•39 views

CVE-2024-13333

The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above and upload perm...

7.5CVSS7.8AI score0.00981EPSS

CVE•added 2025/03/07 10:15 a.m.•37 views

CVE-2024-13805

The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it possi...

6.4CVSS5.9AI score0.00016EPSS