Skip to content
Noroxi

File Manager

file-manager · plugin

Known security vulnerabilities for File Manager. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

1 with public exploit code · latest Aug 6, 2026

Vulnerabilities

  • CVE-2026-15991

    File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter

    High 8.8

  • CVE-2024-7770

    Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload

    High 8.8

  • CVE-2024-7627

    Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition

    High 8.1

  • CVE-2018-7204

    inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/fi

    High 7.5

  • CVE-2022-47599

    WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

    High 7.2

  • CVE-2025-1725

    Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG F

    Medium 6.4

← Back to directory