https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-11380.htmlhttps://patchthecve.com/cve/CVE-2019-11380.htmlWed, 17 Jun 2026 02:12:49 +0000HIGH 7.5: The master-password feature in the ES File Explorer File Manager application 4.2.0.1.3 for Android can be bypassed via a com.estrongs.android.pop.ftp.ESFtpShortcut intent, leading to remote FTP access to the entirety of local storage.https://patchthecve.com/cve/CVE-2019-8345.htmlhttps://patchthecve.com/cve/CVE-2019-8345.htmlWed, 17 Jun 2026 02:41:52 +0000MEDIUM 4.2: The Help feature in the ES File Explorer File Manager application 4.1.9.7.4 for Android allows session hijacking by a Man-in-the-middle attacker on the local network because HTTPS is not used, and an attacker's web site is displayed in a WebView with no information about the URL.https://patchthecve.com/cve/CVE-2019-6447.htmlhttps://patchthecve.com/cve/CVE-2019-6447.htmlWed, 17 Jun 2026 02:39:04 +0000HIGH 8.1: The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute applications via TCP port 59777 requests on the local Wi-Fi network. This TCP port remains open after the ES application has been launched once, and responds to unau