File Manager (Unknown) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-26. Vendor: Unknown.

CVEs of File Manager

• CVE-2026-85081 - CVSS 7.5 (high), 2026-09-26: The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly…
• CVE-2026-19708 - CVSS 5.9 (medium), 2026-09-26: The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes…
• CVE-2026-17540 - CVSS 8.8 (high), 2026-08-10: The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a…
• CVE-2026-17542 - CVSS 7.5 (high), 2026-08-10: The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any…
• CVE-2026-17541 - CVSS 7.5 (high), 2026-08-10: The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its…
• CVE-2026-6382 - CVSS 9.1 (critical), 2026-07-06: The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File…
• CVE-2023-5907 - CVSS 6.5 (medium), 2023-12-11: The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the…
• CVE-2021-24177 - CVSS 5.4 (medium), 2021-04-05: In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint…