Mndpsingh287 vulnerabilities

Products

• File Manager 20
• Theme Editor 6
• Newsletter Popup 4
• File Manager 3
• Advanced Search 2
• Theme Editor 2
• Wp Mail 2

Newest

• mndpsingh287 file manager, ninja team file manager pro, unknown fileorganizer +2 more Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass CVE-2026-85081 7.5 HighSeptember 26, 2026
• mndpsingh287 file manager File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure CVE-2026-19708 5.9 MediumSeptember 26, 2026
• ekia file manager Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access CVE-2026-81301 8.5 HighSeptember 14, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector CVE-2026-17542 7.5 HighAugust 10, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure CVE-2026-17541 7.5 HighAugust 10, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch CVE-2026-17540 8.8 HighAugust 10, 2026
• bitpressadmin file manager File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter CVE-2026-15991 8.8 HighAugust 6, 2026
• mndpsingh287 theme editor Theme Editor <= 3.1 - Cross-Site Request Forgery to CSS Modification CVE-2025-14469 4.3 MediumAugust 1, 2026
• mndpsingh287 file manager, ninja team file manager pro, saad iqbal advanced file manager +1 more +3 more Multiple elFinder Plugins - Authenticated OS Command Injection CVE-2026-6382 9.1 CriticalJuly 6, 2026
• mndpsingh287 theme editor WordPress Theme Editor plugin <= 3.2 - Cross Site Request Forgery (CSRF) to Remote Code Execution vulnerability CVE-2026-39640 9.6 CriticalApril 8, 2026
• mndpsingh287 wp mail WordPress WP Mail plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68008 7.1 HighJanuary 22, 2026
• mndpsingh287 theme editor Theme Editor <= 3.0 - Cross-Site Request Forgery to Remote Code Execution CVE-2025-9890 8.8 HighOctober 18, 2025
• mndpsingh287 wp mail WordPress WP Mail Plugin <= 1.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58822 6.5 MediumSeptember 5, 2025
• bitpressadmin file manager Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads CVE-2025-1725 6.4 MediumJune 3, 2025
• mndpsingh287 track page scroll WordPress Track Page Scroll plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-23536 7.1 HighMarch 3, 2025
• mndpsingh287 file manager WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability CVE-2024-37254 4.3 MediumNovember 1, 2024
• filemanagerpro file manager File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download CVE-2018-25105 9.8 CriticalOctober 16, 2024
• bitapps file manager Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload CVE-2024-8743 Public exploit 6.8 MediumOctober 5, 2024
• bitapps file manager, bitpressadmin bit file manager wordpress +1 more Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-7770 8.8 HighSeptember 10, 2024
• mndpsingh287 theme editor Theme Editor <= 2.8 - Authenticated (Admin+) PHAR Deserialization CVE-2022-2440 7.2 HighAugust 29, 2024
• mndpsingh287 newsletter popup Newsletter Popup <= 1.2 - Admin+ Stored XSS CVE-2024-3644 4.8 MediumMay 16, 2024
• mndpsingh287 newsletter popup, newsletter popup project popup +1 more Newsletter Popup <= 1.2 - List Deletion via CSRF CVE-2024-3643 8.8 HighMay 16, 2024
• mndpsingh287 newsletter popup Newsletter Popup <= 1.2 - Subscriber Deletion via CSRF CVE-2024-3642 6.9 MediumMay 16, 2024
• mndpsingh287 newsletter popup Newsletter Popup <= 1.2 - Unauthenticated Stored XSS CVE-2024-3641 6.1 MediumMay 16, 2024
• advance search project search, mndpsingh287 advanced search +1 more WP Advanced Search <= 1.1.6 - Admin+ SQL Injection CVE-2024-3265 4.7 MediumApril 25, 2024
• mndpsingh287 advanced search Advance Search <= 1.1.6 - Shortcode Deletion via CSRF CVE-2024-2739 8.7 HighApril 15, 2024
• filemanagerpro file manager File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal CVE-2024-2654 6.8 MediumApril 9, 2024
• mndpsingh287 theme editor WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability CVE-2023-6091 7.2 HighMarch 26, 2024
• filemanagerpro file manager File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion CVE-2024-1538 EPSS 10.7% 8.8 HighMarch 21, 2024
• file manager pro, file manager project manager, filemanagerpro file manager pro +1 more +3 more File Manager And File Manager Pro (Multiple Versions) - Directory Traversal CVE-2023-6825 9.9 CriticalMarch 13, 2024
• filemanagerpro file manager File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames CVE-2024-0761 8.1 HighFebruary 5, 2024
• bitapps file manager File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal CVE-2023-5907 6.5 MediumDecember 11, 2023
• mirmay file manager, secure private browser +1 more Mirmay Secure Private Browser / File Manager Auto Lock improper authentication CVE-2018-25030 3.3 LowMarch 28, 2022
• filemanagerpro file manager WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS) CVE-2021-24177 5.4 MediumApril 5, 2021
• mndpsingh287 theme editor Theme Editor < 2.6 - Authenticated Arbitrary File Download CVE-2021-24154 4.9 MediumApril 5, 2021