Extplorer vulnerabilities
We track 3 vulnerabilities in Extplorer products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2026.
Latest Extplorer vulnerabilities
- 9.8 Critical severity
eXtplorer: Missing Authentication for Critical Functionality
eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable fi
- 8.8 High severity
Extplorer: Unrestricted Upload of File with Dangerous Type
eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions.
- 8.8 High severity
Extplorer: Insecure Inherited Permissions
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent