eXtplorer vulnerabilities

3 known vulnerabilities in eXtplorer from Extplorer. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  eXtplorer: Missing Authentication for Critical Functionality

  CVE-2023-54335Jan 13, 2026ExtplorerEPSS 13.7%

  eXtplorer 2.1.14 contains an authentication bypass vulnerability that allows attackers to login without a password by manipulating the login request. Attackers can exploit this flaw to upload malicious PHP files and execute remote commands on the vulnerable fi

• 8.8 High severity

  Extplorer: Unrestricted Upload of File with Dangerous Type

  CVE-2023-29657May 12, 2023ExtplorerEPSS 1.09%

  eXtplorer 2.1.15 is vulnerable to Insecure Permissions. File upload in file manager allows uploading zip file containing php pages with arbitrary code executions.

• 8.8 High severity

  Extplorer: Insecure Inherited Permissions

  CVE-2023-27842Mar 21, 2023ExtplorerEPSS 2.42%

  Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via the index.php compenent