Skip to content

Known vulnerabilities in File Manager Pro

Is your version affected?

CVE Summary Score Published
CVE-2025-0818 Several WordPress plugins using elFinder versions 2.1.64 and prior are vulnerable to Directory Traversal in various… 6.5 Medium Aug 13, 2025
CVE-2024-8507 The File Manager Pro plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and… 8.8 High Oct 16, 2024
CVE-2024-8746 The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing… 7.5 High Oct 16, 2024
CVE-2024-8918 The File Manager Pro plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and… 7.4 High Oct 16, 2024
CVE-2024-7559 The File Manager Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation… 8.8 High Aug 23, 2024
CVE-2023-7015 The File Manager Pro plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tb' parameter in… 6.1 Medium Mar 13, 2024
CVE-2023-6825 The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and… 9.9 Critical Mar 13, 2024
CVE-2023-6846 The File Manager Pro plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,… 8.8 High Feb 5, 2024