advancedfilemanager records
11 published records for vendor advancedfilemanager.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 9.1%
- Pre-auth RCE
- 1
- With a fix record
- 9.1%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type6
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-862 Missing Authorization1
- CWE-863 Incorrect Authorization1
- CWE-922 Insecure Storage of Sensitive Information1
The weakness classes this vendor ships most often: where to look.
CWEAll records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2023-2068Weaponized | File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcodeadvancedfilemanager · file manager advanced shortcode · CWE-434 | Critical9.8 | — | 39.6% | Jun 27, 2023 |
39Monitor | CVE-2025-47688No exploit | WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerabilityadvancedfilemanager · advanced file manager · CWE-862 | Critical9.8 | — | 0.4% | May 7, 2025 |
35Monitor | CVE-2024-8126No exploit | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Uploadadvancedfilemanager · advanced file manager · CWE-434 | High8.8 | — | 0.9% | Sep 26, 2024 |
35Monitor | CVE-2023-7061No exploit | Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Uploadadvancedfilemanager · file manager advanced shortcode · CWE-434 | High8.8 | — | 0.8% | Jul 9, 2024 |
30Monitor | CVE-2024-13333No exploit | Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Uploadadvancedfilemanager · advanced file manager · CWE-434 | High7.5 | — | 0.9% | Jan 17, 2025 |
30Monitor | CVE-2024-11391No exploit | Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Uploadadvancedfilemanager · advanced file manager · CWE-434 | High7.5 | — | 0.7% | Dec 3, 2024 |
30Monitor | CVE-2024-5598No exploit | Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listingadvancedfilemanager · advanced file manager · CWE-922 | High7.5 | — | 0.6% | Jun 29, 2024 |
28Monitor | CVE-2024-8704No exploit | Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_localeadvancedfilemanager · advanced file manager · CWE-22 | High7.2 | — | 0.9% | Sep 26, 2024 |
21Monitor | CVE-2024-8725No exploit | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Uploadadvancedfilemanager · advanced file manager · CWE-434 | Medium5.4 | — | 0.4% | Sep 26, 2024 |
21Monitor | CVE-2024-13805No exploit | Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploadadvancedfilemanager · advanced file manager · CWE-79 | Medium5.4 | — | 0.3% | Mar 7, 2025 |
19Monitor | CVE-2023-3814No exploit | Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Accessadvancedfilemanager · advanced file manager · CWE-863 | Medium4.9 | — | 0.6% | Sep 4, 2023 |
- CVE-2023-206851Plan
File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode
CriticalCVSS 9.8WeaponizedEPSS 40%advancedfilemanager · file manager advanced shortcodeJun 27, 2023
- CVE-2025-4768839Monitor
WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability
CriticalCVSS 9.8No exploitEPSS 0%advancedfilemanager · advanced file managerMay 7, 2025
- CVE-2024-812635Monitor
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 1%advancedfilemanager · advanced file managerSep 26, 2024
- CVE-2023-706135Monitor
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
HighCVSS 8.8No exploitEPSS 1%advancedfilemanager · file manager advanced shortcodeJul 9, 2024
- CVE-2024-1333330Monitor
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 7.5No exploitEPSS 1%advancedfilemanager · advanced file managerJan 17, 2025
- CVE-2024-1139130Monitor
Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload
HighCVSS 7.5No exploitEPSS 1%advancedfilemanager · advanced file managerDec 3, 2024
- CVE-2024-559830Monitor
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
HighCVSS 7.5No exploitEPSS 1%advancedfilemanager · advanced file managerJun 29, 2024
- CVE-2024-870428Monitor
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale
HighCVSS 7.2No exploitEPSS 1%advancedfilemanager · advanced file managerSep 26, 2024
- CVE-2024-872521Monitor
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload
MediumCVSS 5.4No exploitEPSS 0%advancedfilemanager · advanced file managerSep 26, 2024
- CVE-2024-1380521Monitor
Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
MediumCVSS 5.4No exploitEPSS 0%advancedfilemanager · advanced file managerMar 7, 2025
- CVE-2023-381419Monitor
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
MediumCVSS 4.9No exploitEPSS 1%advancedfilemanager · advanced file managerSep 4, 2023