Filester vulnerabilities
3 known vulnerabilities in Filester from NinjaTeam. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
File Manager Pro – Filester: Improper Limitation of a Pathname to a Restricted Directory
The File Manager Pro – Filester plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 1.8.5 via the 'fm_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access
- 8.8 High severity
File Manager Pro – Filester: Unrestricted Upload of File with Dangerous Type
The File Manager Pro – Filester plugin for WordPress is vulnerable to arbitrary file uploads due to missing validation in the 'fsConnector' function in all versions up to, and including, 1.8.6. This makes it possible for authenticated attackers, with Subscribe
- 8.8 High severity
File Manager Pro – Filester: Missing Authorization
The File Manager Pro – Filester plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'njt_fs_saveSettingRestrictions' function in all versions up to, and including, 1.8.2. This makes it possible for a