Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution

Уязвимости

• CVE-2025-47688без авторизации≤ 5.3.1

  WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability

  Критич. 9.8

• CVE-2024-8126подписчик+≤ 5.2.8

  Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload

  Высокий 8.8

• CVE-2024-5598без авторизации≤ 5.2.4

  Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing

  Высокий 7.5

• CVE-2024-13333подписчик+≤ 5.2.13

  Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload

  Высокий 7.5

• CVE-2024-8704админ≤ 5.2.8

  Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale

  Высокий 7.2

• CVE-2025-0818без авторизации≤ 8.4.2

  Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion

  Средний 6.5

• CVE-2026-15009без авторизации · нужен клик≤ 5.4.12

  Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter

  Средний 6.1

• CVE-2024-13805подписчик+≤ 5.2.14

  Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload

  Средний 5.4

• CVE-2024-8725подписчик+≤ 5.2.8

  Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload

  Средний 5.4