Unknown File Manager vulnerabilities

• saad iqbal advanced file manager Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass CVE-2026-79627 7.1 HighOctober 21, 2026
• mndpsingh287 file manager, ninja team file manager pro, unknown fileorganizer +2 more Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass CVE-2026-85081 7.5 HighSeptember 26, 2026
• mndpsingh287 file manager File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure CVE-2026-19708 5.9 MediumSeptember 26, 2026
• saad iqbal advanced file manager Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui CVE-2026-11565 8.5 HighAugust 19, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector CVE-2026-17542 7.5 HighAugust 10, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure CVE-2026-17541 7.5 HighAugust 10, 2026
• mndpsingh287 file manager Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch CVE-2026-17540 8.8 HighAugust 10, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF CVE-2026-16292 5.4 MediumAugust 2, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal CVE-2026-12277 Public exploit 8.7 HighJuly 7, 2026
• mndpsingh287 file manager, ninja team file manager pro, saad iqbal advanced file manager +1 more +3 more Multiple elFinder Plugins - Authenticated OS Command Injection CVE-2026-6382 9.1 CriticalJuly 6, 2026
• nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Authenticated (Subscriber+) Arbitrary File Deletion CVE-2026-8095 8.1 HighJune 27, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion CVE-2026-8380 Public exploit 6.5 MediumJune 26, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download CVE-2026-8379 7.5 HighJune 23, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename CVE-2026-8378 5.4 MediumJune 23, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR CVE-2026-5337 6.5 MediumMay 3, 2026
• unknown frontend file manager plugin Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending CVE-2026-0829 5.8 MediumFebruary 17, 2026
• nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.5 - Missing Authorization to Unauthenticated Arbitrary File Sharing via 'file_id' Parameter CVE-2026-1280 7.5 HighJanuary 28, 2026
• unknown frontend file manager plugin Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion CVE-2025-14804 7.7 HighJanuary 7, 2026
• nmedia frontend file manager plugin Frontend File Manager Plugin <= 23.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming CVE-2025-13382 4.3 MediumNovember 25, 2025
• nmedia frontend file manager plugin Frontend File Manager <= 21.5 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2023-7306 7.5 HighJuly 25, 2025
• najeebmedia frontend file manager, n-media post front-end form, post front-end form +1 more +3 more Frontend File Manager < 4.0 & N-Media Post Front-end Form < 1.1 & - Arbitrary File Upload CVE-2016-15042 Public exploit 9.8 CriticalOctober 16, 2024
• bitapps file manager File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal CVE-2023-5907 6.5 MediumDecember 11, 2023
• najeebmedia frontend file manager plugin Frontend File Manager < 22.6 - Editor+ Arbitrary File Download CVE-2023-5105 6.5 MediumDecember 4, 2023
• ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8.1 - Admin+ Remote Code Execution CVE-2023-4861 Public exploit 7.2 HighOctober 16, 2023
• ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting CVE-2023-4862 4.8 MediumOctober 16, 2023
• ninja team file manager pro, ninjateam filester +1 more File Manager Pro < 1.8 - Remote Code Execution via CSRF CVE-2023-4827 8.8 HighOctober 16, 2023
• advancedfilemanager advanced file manager Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access CVE-2023-3814 4.9 MediumSeptember 4, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Content Injection CVE-2021-4369 5.8 MediumJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Authenticated Settings Change leading to Arbitrary File Upload CVE-2021-4368 9.9 CriticalJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Stored Cross-Site Scripting CVE-2021-4365 7.2 HighJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager Plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion CVE-2021-4359 6.5 MediumJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Arbitrary File Download CVE-2021-4356 9.0 CriticalJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated Post Meta Change CVE-2021-4351 5.8 MediumJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Unauthenticated HTML Injection leading to Spam Emails CVE-2021-4350 7.2 HighJune 7, 2023
• najeebmedia frontend file manager plugin Frontend File Manager <= 18.2 - Privilege Escalation CVE-2021-4344 6.4 MediumJune 7, 2023
• devowl real media library, real media library: media library folder & file manager +1 more Real Media Library < 4.18.29 - Author+ Stored XSS CVE-2023-0285 5.4 MediumFebruary 21, 2023
• najeebmedia frontend file manager plugin Frontend File Manager < 21.4 - File Upload via CSRF CVE-2022-3126 4.3 MediumOctober 17, 2022
• najeebmedia frontend file manager, unknown frontend file manager plugin +1 more Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload CVE-2022-3125 8.8 HighOctober 3, 2022
• najeebmedia frontend file manager, unknown frontend file manager plugin +1 more Frontend File Manager < 21.3 - Unauthenticated File Renaming CVE-2022-3124 5.3 MediumOctober 3, 2022
• xplodedthemes wpide, unknown wpide – file manager & code editor +1 more WPide < 3.0 - Admin+ Local File Inclusion CVE-2022-2261 7.2 HighAugust 29, 2022
• mediajedi user private files, unknown frontend file manager & sharing – user private files +1 more User Private Files < 1.1.3 - Subscriber+ Arbitrary File Upload CVE-2022-2356 8.8 HighAugust 8, 2022
• unknown library file manager Library File Manager < 5.2.3 - Subscriber+ Arbitrary File Creation/Upload/Deletion CVE-2022-0403 8.1 HighApril 4, 2022
• filemanagerpro file manager WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS) CVE-2021-24177 5.4 MediumApril 5, 2021