File Manager — Plugin Vulnerabilities

Medium 6.4 Closed

2025-06-03< 6.8

WordPress Bit File Manager Plugin <= 6.7 is vulnerable to Cross Site Scripting (XSS)

Patchstack EUVD Wordfence CVE

Medium 6.8 Closed

2024-10-07< 6.5.8

WordPress Bit File Manager Plugin <= 6.5.7 is vulnerable to Arbitrary File Upload

Patchstack CVE Wordfence

High 8.8 Closed

2024-09-10< 6.5.6

CVE-2024-7770

CVE Patchstack Wordfence

High 8.1 Closed

2024-09-05≥ 6.0 and ≤ 6.5.5

CVE-2024-7627

CVE Wordfence Patchstack

Medium 6.5 Closed

2024-12-19< 6.3

WordPress File Manager Plugin < 6.3 is vulnerable to Path Traversal

Patchstack CVE Wordfence WPScan

Medium 5.5 Closed

2023-12-20< 6.0

CVE-2022-47599

CVE Patchstack Wordfence

N/A Closed

< 4.1.5

File Manager <= 4.1.4 - Cross-Site Request Forgery (CSRF) Arbitrary File Upload

WPScan

Critical 9.8 Closed

2021-06-14< 5.2.3

CVE-2021-32682

CVE WPScan

N/A Closed

2017-03-01< 4.1.5

Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload

Wordfence

N/A Closed

2019-07-10< 4.9

WordPress File Manager plugin <= 4.8 - Multiple Vulnerabilities

Patchstack

N/A Closed

2022-03-30< 5.2.3

WordPress Library File Manager plugin <= 5.2.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack

High 8.1 Closed

2022-04-04< 5.2.3

CVE-2022-0403

CVE Patchstack Wordfence

High 7.5 Closed

2018-03-07< 5.0.2

CVE-2018-7204

CVE Patchstack Wordfence WPScan