VendorsAdvanced File Manageradvanced_file_managerany version
Vulnerabilities

Advanced File Manager Advancedfilemanager Advanced File Manager any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2025-47688
WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability
Published 2025-05-07 · Modified
9.8EPSS 0.004
CVE-2024-8126
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
Published 2024-09-26 · Analyzed
8.8EPSS 0.009
CVE-2024-13333
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
Published 2025-01-17 · Analyzed
7.5EPSS 0.009
CVE-2024-11391
Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
Published 2024-12-03 · Analyzed
7.5EPSS 0.007
CVE-2024-5598
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
Published 2024-06-29 · Modified
7.5EPSS 0.006
CVE-2024-8704
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
Published 2024-09-26 · Analyzed
7.2EPSS 0.009
CVE-2024-8725
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
Published 2024-09-26 · Analyzed
6.8EPSS 0.004
CVE-2024-13805
Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
Published 2025-03-07 · Analyzed
6.4EPSS 0.003
CVE-2023-3814
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
Published 2023-09-04 · Modified
4.9EPSS 0.006