High
CVE-2024-8704
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 59
Reset filters
High
CVE-2024-7770
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-7627
Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition
High
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2023-7062
Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal
High
CVE-2023-7061
Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-5598
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2024-37254
File Manager <= 7.2.7 - Missing Authorization
Medium
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
High
CVE-2024-1538
File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Medium
CVE-2023-7015
File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting
High
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Low
CVE-2023-5907
File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
Medium
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
Critical
CVE-2023-2068
File Manager Advanced Shortcode WordPress <= 2.3.2 - Unauthenticated Arbitrary File Upload to Remote Code Execution via Shortcode
High
CVE-2022-47599
Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection
High
CVE-2022-0403
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion
Medium
CVE-2021-24177
WP File Manager <= 7.0 - Reflected Cross-Site Scripting
High
CVE-2020-35235
Secure File Manager < 2.8.2 - Remote Code Execution
Critical
Exploited in attacks
CVE-2020-25213
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Medium
077b3483-ab1c-401d-aa67-c4da5fca90b4
File Manager <= 4.8 - Missing Authorization on AJAX Actions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.