6.5
Medium
CVE-2025-0818 Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various…
Description
Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various versions. This makes it possible for unauthenticated attackers to delete arbitrary files. Successful exploitation of this vulnerability requires a site owner to explicitly make an instance of the file manager available to users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| File Manager Pro – Filester 1.8 | earliest → 1.8.9 | No fix stated |
| Advanced File Manager – Ultimate WP File Manager And Document Library Solution 5.3 | earliest → 5.3.6 | No fix stated |
| File Manager 8.4 | earliest → 8.4.2 | No fix stated |
| Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution 5.3 | earliest → 5.3.6 | No fix stated |
| File Manager Pro 8.4 | earliest → 8.4.2 | No fix stated |
Other CVEs of File Manager Pro – Filester
The 6 CVEs of File Manager Pro – Filester →
CVE-2025-3234
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type…
7.2
High
CVE-2024-12331
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…
4.3
Medium
CVE-2024-9669
The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up…
7.2
High
CVE-2024-8066
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation…
7.5
High