Advancedfilemanager vulnerabilities
We track 3 vulnerabilities in Advancedfilemanager products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 17, 2025.
Latest Advancedfilemanager vulnerabilities
- 7.5 High severity
Advanced File Manager — Ultimate WordPress…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber
- 8.8 High severity
Advanced File Manager Shortcodes: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.3. This makes it possible for authenticated attackers with contributor access or above to upload arbitrary files on the
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Insecure Storage of Sensitive Information
The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data