https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-47688.htmlhttps://patchthecve.com/cve/CVE-2025-47688.htmlWed, 17 Jun 2026 09:28:33 +0000MEDIUM 5.3: Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced File Manager: from n/a through <= 5.3.1.https://patchthecve.com/cve/CVE-2024-13805.htmlhttps://patchthecve.com/cve/CVE-2024-13805.htmlWed, 17 Jun 2026 07:02:45 +0000MEDIUM 6.4: The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 5.2.14 due to insufficient input sanitization and output escaping. This makes it possibhttps://patchthecve.com/cve/CVE-2024-13333.htmlhttps://patchthecve.com/cve/CVE-2024-13333.htmlWed, 17 Jun 2026 07:01:48 +0000HIGH 7.5: The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above and upload permihttps://patchthecve.com/cve/CVE-2024-11391.htmlhttps://patchthecve.com/cve/CVE-2024-11391.htmlWed, 17 Jun 2026 06:57:40 +0000HIGH 7.5: The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, https://patchthecve.com/cve/CVE-2024-8725.htmlhttps://patchthecve.com/cve/CVE-2024-8725.htmlWed, 17 Jun 2026 08:23:11 +0000MEDIUM 6.8: Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a lack of proper checks to ensure lower-privileged roles cannot upload .css and .js files to arbitrary directories. This makes it possible for authenticated attackers, with Subscribhttps://patchthecve.com/cve/CVE-2024-8704.htmlhttps://patchthecve.com/cve/CVE-2024-8704.htmlWed, 17 Jun 2026 08:23:09 +0000HIGH 7.2: The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbitrary https://patchthecve.com/cve/CVE-2024-8126.htmlhttps://patchthecve.com/cve/CVE-2024-8126.htmlWed, 17 Jun 2026 08:21:56 +0000HIGH 7.5: The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an Adminishttps://patchthecve.com/cve/CVE-2024-5598.htmlhttps://patchthecve.com/cve/CVE-2024-5598.htmlWed, 17 Jun 2026 08:16:16 +0000HIGH 7.5: The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data including backups or other sensitive inf