Modalweb vulnerabilities
We track 3 vulnerabilities in Modalweb products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 3, 2024.
Latest Modalweb vulnerabilities
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers,
- 7.2 High severity
Advanced File Manager – Ultimate File Manager…: Improper Limitation of a Pathname to a Restricted Directory
The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and
- 8.8 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and abov