Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution vulnerabilities
4 known vulnerabilities in Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution from Saadiqbal. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.10. This makes it possible for authenticated attackers,
- 7.2 High severity
Advanced File Manager – Ultimate File Manager…: Improper Limitation of a Pathname to a Restricted Directory
The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This makes it possible for authenticated attackers, with Administrator-level access and
- 8.8 High severity
Advanced File Manager – Ultimate File Manager…: Unrestricted Upload of File with Dangerous Type
The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and abov
- 7.5 High severity
Advanced File Manager – Ultimate File Manager…: Insecure Storage of Sensitive Information
The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. This makes it possible for unauthenticated attackers to extract sensitive data