Advanced File Manager vulnerabilities
We track 3 vulnerabilities in Advanced File Manager products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Advanced File Manager vulnerabilities
- 7.1 High severity
Advanced File Manager: Improper Neutralization of Input During Web Page Generation
The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager access by an administrator to store a file containing script that is not stripped and
- 8.8 High severity
Advanced File Manager Shortcodes: Insertion of Sensitive Information into Externally-Accessible File or Directory
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4. This makes it possible for attackers with contributor access or higher to read the contents of arbitrary files on the serv
- 8.8 High severity
Advanced File Manager Shortcodes: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers with contributor access or above to upload arbitrary files on the