WP Experts vulnerabilities
We track 1 vulnerability in WP Experts products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest WP Experts vulnerabilities
- 7.2 High severity
File Manager Advanced Shortcode: Improper Limitation of a Pathname to a Restricted Directory
The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortcod