Advancedfilemanager Advanced File Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Advancedfilemanager Advanced File Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-11391 — CVSS 7.5 (high): The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the…
• CVE-2024-13333 — CVSS 7.5 (high): The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the…
• CVE-2024-5598 — CVSS 7.5 (high): The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4…
• CVE-2024-8126 — CVSS 7.5 (high): The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all…
• CVE-2024-8704 — CVSS 7.2 (high): The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8…
• CVE-2024-8725 — CVSS 6.8 (medium): Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a lack of proper…
• CVE-2024-13805 — CVSS 6.4 (medium): The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored…
• CVE-2025-47688 — CVSS 5.3 (medium): Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured…
• CVE-2023-3814 — CVSS 4.9 (medium): The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site…