Skip to content
Noroxi

filemanagerpro records

14 published records for vendor filemanagerpro.

Researcher profile

Entered KEV
1 · 7.1%
Weaponized
1 · 7.1%
Pre-auth RCE
4
With a fix record
7.1%
Median publish → KEV
420 days

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2020-25213
    98Now

    The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    filemanagerpro · file managerSep 9, 2020

  • CVE-2023-6846
    40Plan

    File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 16%

    filemanagerpro · file managerFeb 5, 2024

  • CVE-2018-25105
    39Monitor

    File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download

    CriticalCVSS 9.8No exploitEPSS 1%

    filemanagerpro · file managerOct 16, 2024

  • CVE-2024-1538
    38Monitor

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    HighCVSS 8.8No exploitEPSS 11%

    filemanagerpro · file managerMar 21, 2024

  • CVE-2020-24312
    35Monitor

    mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fm_backups directory with a .htaccess file.

    HighCVSS 7.5Proof of conceptEPSS 16%

    filemanagerpro · file managerAug 26, 2020

  • CVE-2018-16966
    35Monitor

    There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parame

    HighCVSS 8.8No exploitEPSS 1%

    filemanagerpro · file managerApr 15, 2019

  • CVE-2024-8746
    35Monitor

    File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload

    HighCVSS 8.8No exploitEPSS 1%

    filemanagerpro · file managerOct 16, 2024

  • CVE-2024-8507
    35Monitor

    File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 0%

    filemanagerpro · file managerOct 16, 2024

  • CVE-2024-0761
    30Monitor

    File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames

    HighCVSS 7.5No exploitEPSS 1%

    filemanagerpro · file managerFeb 5, 2024

  • CVE-2024-2654
    27Monitor

    File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal

    MediumCVSS 6.8No exploitEPSS 1%

    filemanagerpro · file managerApr 9, 2024

  • CVE-2018-16967
    24Monitor

    There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parame

    MediumCVSS 6.1No exploitEPSS 1%

    filemanagerpro · file managerApr 15, 2019

  • CVE-2018-16363
    21Monitor

    The mndpsingh287 File Manager plugin V2.9 for WordPress has XSS via the lang parameter in a wp-admin/admin.php?page=wp_file_manager request

    MediumCVSS 5.4Proof of conceptEPSS 1%

    filemanagerpro · file managerSep 7, 2018

  • CVE-2021-24177
    21Monitor

    WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 1%

    filemanagerpro · file managerApr 5, 2021

  • CVE-2024-8918
    21Monitor

    File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload

    MediumCVSS 5.4No exploitEPSS 0%

    filemanagerpro · file managerOct 16, 2024