Advanced File Manager

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Advanced File Manager records in CISA KEV

No Advanced File Manager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Advanced File Manager 9 records MEDIUM File Manager Advanced Shortcode 2 records HIGH

Records

2 records in File Manager Advanced Shortcode · all components

TI-2023-01945 CVE-2023-2068 · GHSA-6h38-5jv9-8r57

File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

HIGH 76

The File Manager Advanced Shortcode WordPress plugin through 2.3.2 does not adequately prevent uploading files with disallowed MIME types when using the shortcode.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.3962 Published 2023-06-27 No fix listed

TI-2023-06457 CVE-2023-7061 · GHSA-8p7c-2mvg-g9v9

Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload

MEDIUM 42

The Advanced File Manager Shortcodes plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 2.5.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00831 Published 2024-07-10 No fix listed CWE-434

Open these records in search →

Critical	2
High	7
Medium	3
Low	0
No CVSS	0