← WordPress Vulnerabilities
WordPress security by component

Advanced File Manager

Advanced File Manager is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published May 07, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: advanced-file-manager

CVE-2025-47688: Advanced File Manager: A security weakness

Advanced File Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedMay 07, 2025
Safe version guidanceSee mitigation notes
Safe version
May 07, 2025 CVE-2025-47688
Advanced File Manager: A security weakness
Advanced File Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVD9.8
Dec 03, 2024 CVE-2024-11391
Advanced File Manager: Dangerous file upload
Advanced File Manager is affected by dangerous file upload. Exploitation requires at least subscriber-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE7.5
NVDPending
Sep 04, 2023 CVE-2023-3814
Advanced File Manager: A security weakness
Advanced File Manager is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.9
NVD4.9