Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: File Manager 8.0.5 Clear all filters
TI-2026-58443 CVE-2026-85081 · GHSA-hj83-mg7w-xg78

Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass

Priority LOW 34

The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file bro…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00216 Published 2026-09-26 Fixed in 8.0.5, 1.2.1 +1 CWE-79
TI-2026-15987 CVE-2026-19708 · GHSA-w9qj-pq6f-hqr7

File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure

Priority LOW 26

The File Manager WordPress plugin before 8.0.5 does not prevent unauthenticated users from downloading its database backup archives, and in some cases writes them under a fixed filename, allowing unauthenticated attacker…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00216 Published 2026-09-26 Fixed in 8.0.5 CWE-200