Advanced File Manager
Vendor:
First CVE: Sep 4, 2023 · Active for 2 years
9
Total CVEs
More Total CVEs than 86% of tracked products
3.0
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Advanced File Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 4, 2023
2 years ago
Most Recent CVE
May 7, 2025
445 days ago
CVE Severity & Scoring
Advanced File Manager9 CVEs
33%
56%
11%
All CVEs352,719 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (77.8%)
High2 (22.2%)
Unknown0 (0.0%)
User Interaction
None7 (77.8%)
Unknown0 (0.0%)
Required2 (22.2%)
Privileges Required
Low5 (55.6%)
High2 (22.2%)
None2 (22.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-47688CRITICAL Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff | May 7, 2025 | 9.8 | 26 | NO | NO |
CVE-2024-8126HIGH The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads via the 'class_fma_connector.php' file in all versions up to, and including, 5.2.8. This make | Sep 26, 2024 | 8.8 | 26 | NO | NO |
CVE-2024-11391HIGH The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via the 'class_fma_connector.php' file in all versions up | Dec 3, 2024 | 7.5 | 23 | NO | NO |
CVE-2024-13333HIGH The Advanced File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'fma_local_file_system' function in versions 5.2.1 | Jan 17, 2025 | 7.5 | 22 | NO | NO |
CVE-2024-8704HIGH The Advanced File Manager plugin for WordPress is vulnerable to Local JavaScript File Inclusion in all versions up to, and including, 5.2.8 via the 'fma_locale' parameter. This mak | Sep 26, 2024 | 7.2 | 22 | NO | NO |
CVE-2024-5598HIGH The Advanced File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.4 via the 'fma_local_file_system' function. | Jun 29, 2024 | 7.5 | 22 | NO | NO |
CVE-2024-8725MEDIUM Multiple plugins and/or themes for WordPress are vulnerable to Limited File Upload in various versions. This is due to a lack of proper checks to ensure lower-privileged roles cann | Sep 26, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-13805MEDIUM The Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in al | Mar 7, 2025 | 5.4 | 17 | NO | NO |
CVE-2023-3814MEDIUM The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary fil | Sep 4, 2023 | 4.9 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Advanced File Manager
Top CWEs
Versions
No cataloged versions.