Advanced File Manager vulnerabilities

2 known vulnerabilities in Advanced File Manager from Advancedfilemanager. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Advanced File Manager — Ultimate WordPress…: Unrestricted Upload of File with Dangerous Type

  CVE-2024-13333Jan 17, 2025Saadiqbal

  The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.12 to 5.2.13. This makes it possible for authenticated attackers, with Subscriber

• 7.5 High severity

  Advanced File Manager – Ultimate File Manager…: Insecure Storage of Sensitive Information

  CVE-2024-5598Jun 29, 2024Saadiqbal

  The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data