Skip to content
OpenAdvisories

Product · mndpsingh287

File Manager

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2024-1538 EPSS 11%

    File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion

    The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due to missing or incorrect nonce validation on the wp_file_manager page that includes files through the 'lang' parameter. T…

    mndpsingh287 File Manager Web / CMS
  • High 8.1
    CVE-2024-0761

    File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames

    The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to insufficient randomness in the backup filenames, which use a timestamp plus 4 random digits. This makes it possible for un…

    mndpsingh287 File Manager Web / CMS