CVE-2024-7627

CVE-2024-7627 affects the WordPress Bit File Manager plugin (versions 6.0–6.5.5). The vulnerability stems from the checkSyntax function writing a temporary PHP file into a publicly accessible directory before validating input, enabling unauthenticated attackers to execute code on the server when ...

CVE-2022-47599

CVE-2022-47599 affects the Bit File Manager WordPress plugin (

CVE-2024-7770

CVE-2024-7770 affects Bit File Manager for WordPress (

CVE-2023-5907

CVE-2023-5907 affects the WordPress plugin File Manager, prior to version 6.3. The root directory for the file manager is not restricted, allowing an administrator to set a root outside the WordPress root (including in multisite setups), which can grant access to system files and directories. The...