7.5
High
CVE-2024-7031 The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
Description
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for authenticated attackers, with a role that has been granted permissions by an Administrator, to update the plugin settings for user role restrictions, including allowing file types such as .php to be uploaded.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| File Manager Pro – Filester 1.8 | earliest → 1.8.2 | No fix stated |
| filester 1.8 | earliest → 1.8.2 | No fix stated |
Other CVEs of File Manager Pro – Filester
The 6 CVEs of File Manager Pro – Filester →
CVE-2025-0818
Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various…
6.5
Medium
CVE-2025-3234
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
7.2
High
CVE-2024-12331
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
4.3
Medium
CVE-2024-9669
The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up…
7.2
High