Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: bitpressadmin Component: File Manager Clear all filters
TI-2024-07204 CVE-2024-7770 · GHSA-r9w3-4w3v-h5x6

Unrestricted file upload in bitpressadmin File Manager

Priority MEDIUM 42

The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all v…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01067 Published 2024-09-10 No fix listed CWE-434
TI-2022-23637 CVE-2022-47599 · GHSA-f3q2-gmqc-c2g2

WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection

Priority LOW 32

Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & O…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00516 Published 2023-12-20 No fix listed CWE-502
TI-2023-05439 CVE-2023-5907 · GHSA-hmhp-m9p3-px6r

File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal

Priority MEDIUM 64

The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and director…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.0085 Published 2023-12-11 Fixed in 6.3 CWE-552