https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-12331.htmlhttps://patchthecve.com/cve/CVE-2024-12331.htmlWed, 17 Jun 2026 06:59:30 +0000MEDIUM 4.3: The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_install_plugin' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level acceshttps://patchthecve.com/cve/CVE-2024-9669.htmlhttps://patchthecve.com/cve/CVE-2024-9669.htmlWed, 17 Jun 2026 08:25:01 +0000HIGH 7.2: The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fm_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to include and execute arbithttps://patchthecve.com/cve/CVE-2024-8066.htmlhttps://patchthecve.com/cve/CVE-2024-8066.htmlWed, 17 Jun 2026 08:21:47 +0000HIGH 7.5: The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted pe