Advisories · Technology

mndpsingh287 File Manager.

Every CVE that names mndpsingh287 File Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-37254 CVE record

CVSS 4.3 Medium

WordPress WP File Manager plugin <= 7.2.7 - Broken Access Control vulnerability
- mndpsingh287 File Manager
- Broken access control
Not analysed yet 1 Nov 2024
CVE-2018-25105 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download
- mndpsingh287 File Manager
- Broken access control
Not analysed yet 16 Oct 2024
CVE-2024-2654 CVE record

CVSS 6.8 Medium

File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
- mndpsingh287 File Manager
- Path traversal
Not analysed yet 9 Apr 2024
CVE-2024-1538 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
- mndpsingh287 File Manager
- Cross-site request forgery (CSRF)
Not analysed yet 21 Mar 2024
CVE-2023-6825 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
- mndpsingh287 File Manager
- File Manager Pro
- Path traversal
Not analysed yet 13 Mar 2024
CVE-2024-0761 CVE record

CVSS 8.1 High

File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
- mndpsingh287 File Manager
- Weak cryptography or TLS
Not analysed yet 5 Feb 2024