Medium
CVE-2026-19708
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2026-85081
Multiple elFinder Plugins <= 8.0.4 - Reflected Cross-Site Scripting
High
CVE-2026-6382
Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution
Medium
CVE-2025-0818
Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion
High
CVE-2024-8507
File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2024-8746
File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload
High
CVE-2024-8918
File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload
High
CVE-2024-7559
File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-37254
File Manager <= 7.2.7 - Missing Authorization
Medium
CVE-2024-2654
File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal
High
CVE-2024-1538
File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion
Critical
CVE-2023-6825
File Manager And File Manager Pro (Multiple Versions) - Directory Traversal
Medium
CVE-2023-7015
File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting
High
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Medium
CVE-2021-24177
WP File Manager <= 7.0 - Reflected Cross-Site Scripting
Critical
Exploited in attacks
CVE-2020-25213
File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution
High
CVE-2020-24312
WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups
Medium
077b3483-ab1c-401d-aa67-c4da5fca90b4
File Manager <= 4.8 - Missing Authorization on AJAX Actions
High
CVE-2018-16966
File Manager <= 3.0 - Cross-Site Request Forgery
Critical
CVE-2018-25105
File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download
Medium
CVE-2018-16967
File Manager <= 3.0 - Stored Cross-Site Scripting
Medium
CVE-2018-16363
File Manager <= 2.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.