Advisories · Technology

File Manager Pro.

Every CVE that names File Manager Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85081 CVE record

CVSS 7.5 High

Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass
- File Manager
- FileOrganizer
- Cross-site scripting (XSS)
Not analysed yet 26 Sept 2026
CVE-2026-6382 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Multiple elFinder Plugins - Authenticated OS Command Injection
- FileOrganizer
- Advanced File Manager
Not analysed yet 6 Jul 2026
CVE-2025-0818 CVE record

CVSS 6.5 Medium

Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion
- ninjateam File Manager Pro – Filester
- saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution
- Path traversal
Not analysed yet 13 Aug 2025
CVE-2024-8507 CVE record

CVSS 8.8 High

File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
- File Manager Pro
- Cross-site request forgery (CSRF)
Not analysed yet 16 Oct 2024
CVE-2024-8746 CVE record

CVSS 7.5 High

File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
- File Manager Pro
- Unrestricted file upload
Not analysed yet 16 Oct 2024
CVE-2024-8918 CVE record

CVSS 7.4 High

File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload
- File Manager Pro
- Unrestricted file upload
Not analysed yet 16 Oct 2024
CVE-2024-7559 CVE record

CVSS 8.8 High

File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
- File Manager Pro
- Code injection
Not analysed yet 23 Aug 2024
CVE-2023-7015 CVE record

CVSS 6.1 Medium

File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting
- File Manager Pro
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2024
CVE-2023-6825 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
- mndpsingh287 File Manager
- File Manager Pro
- Path traversal
Not analysed yet 13 Mar 2024
CVE-2023-6846 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
- File Manager Pro
- Code injection
Not analysed yet 5 Feb 2024
CVE-2023-4861 CVE record

CVSS 7.2 High

File Manager Pro < 1.8.1 - Admin+ Remote Code Execution
- File Manager Pro
Not analysed yet 16 Oct 2023
CVE-2023-4862 CVE record

File Manager Pro < 1.8.1 - Admin+ Stored Cross-Site Scripting
- File Manager Pro
Not analysed yet 16 Oct 2023
CVE-2023-4827 CVE record

CVSS 8.8 High

File Manager Pro < 1.8 - Remote Code Execution via CSRF
- File Manager Pro
Not analysed yet 16 Oct 2023