PatchTheCVEadvancedfilemanager vulnerabilities
Recent CVEs affecting advancedfilemanager products. 9 tracked.
advancedfilemanager has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-05-07. Highest priority: CVE-2023-7061 (score 45/100).
- CVE-2025-47688 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploitin
- CVE-2024-8725 MEDIUM 6.8 UPGRADE Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions
- CVE-2024-8704 HIGH 7.2 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all version
- CVE-2024-8126 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_conn
- CVE-2024-5598 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions
- CVE-2024-13805 MEDIUM 6.4 UPGRADE The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress i
- CVE-2024-13333 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ
- CVE-2024-11391 HIGH 7.5 UPGRADE The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file typ
- CVE-2023-7061 HIGH 8.8 UPGRADE The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versi
FAQ
How do I fix advancedfilemanager vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is advancedfilemanager being exploited right now?
None of the tracked advancedfilemanager CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which advancedfilemanager CVE should I patch first?
CVE-2023-7061 currently ranks highest (45/100): The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versi.