PatchTheCVEadvanced file manager vulnerabilities and fixes
Recent CVEs affecting advanced file manager, with upgrade or downgrade steps. 8 tracked.
Also searched as: advancedfilemanager.
advanced file manager has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-05-07. Highest priority: CVE-2024-5598 (score 43/100).
- CVE-2025-47688 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploitin
- CVE-2024-8725 MEDIUM 6.8 UPGRADE Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions
- CVE-2024-8704 HIGH 7.2 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all version
- CVE-2024-8126 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_conn
- CVE-2024-5598 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions
- CVE-2024-13805 MEDIUM 6.4 UPGRADE The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress i
- CVE-2024-13333 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ
- CVE-2024-11391 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ
FAQ
How do I fix advanced file manager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advanced file manager being exploited right now?
None of the tracked advanced file manager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advanced file manager CVE should I patch first?
CVE-2024-5598 currently ranks highest (43/100): The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions.