📦 Advanced File Manager

The Advanced File Manager WordPress plugin versions 5.2.12 to 5.2.13 allow authenticated attackers with Subscriber-level access and upload permissions to upload arbitrary files due to missing file typ...

The Advanced File Manager WordPress plugin allows authenticated attackers with Subscriber-level access to upload arbitrary files due to missing file type validation. This vulnerability can lead to rem...

The Advanced File Manager WordPress plugin allows authenticated attackers with Subscriber-level access to upload arbitrary files, including .htaccess files, which can lead to remote code execution. Th...

The Advanced File Manager WordPress plugin exposes sensitive files to unauthenticated attackers through a vulnerable function. This allows extraction of backups and other confidential data from the Tr...

This CVE describes a missing authorization vulnerability in the Advanced File Manager WordPress plugin that allows attackers to exploit incorrectly configured access control security levels. Attackers...

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to upload malicious SVG files containing stored cross-site scripting (XSS) payloads. When other users vie...

This vulnerability allows authenticated WordPress users with Subscriber-level access or higher to upload .css and .js files to arbitrary directories within the WordPress root. Attackers can exploit th...