Have you found a vulnerability in a WordPress plugin or theme? Report vulnerabilities in WordPress plugins and themes through our bug bounty program and earn a bounty on all in-scope submissions, while we handle the responsible disclosure process on your behalf.

Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin

Wordfence Intelligence > Vulnerability Database > WordPress Plugins > Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin

Information

Software Type	Plugin
Software Slug	file-manager-advanced (view on wordpress.org)
Software Status	Active
Software Author	saadiqbal
Software Website	wordpress.org
Software Downloads	3,877,938
Software Active Installs	100,000
Software Record Last Updated	January 19, 2025

7 Vulnerabilities

Submit a Vulnerability

Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload

7.5

CVE-2024-13333

Jan 16, 2025

Researcher: TANG Cheuk Hei (siunam)

Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload

7.5

CVE-2024-11391

Dec 2, 2024

Researcher: Joshua Provoste

Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload

7.5

CVE-2024-8126

Sep 25, 2024

Researcher: TANG Cheuk Hei (siunam)

Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale

7.2

CVE-2024-8704

Sep 25, 2024

Researcher: TANG Cheuk Hei (siunam)

Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload

6.8

CVE-2024-8725

Sep 25, 2024

Researcher: TANG Cheuk Hei (siunam)

Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing

7.5

CVE-2024-5598

Jun 28, 2024

Researcher: emad

Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access

6.6

CVE-2023-3814

Aug 14, 2023

Researcher: Dmitrii Ignatyev

Title	Status	CVE ID	CVSS	Researchers	Date
Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload	Patched	CVE-2024-13333	7.5	TANG Cheuk Hei (siunam)	January 16, 2025
Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload	Patched	CVE-2024-11391	7.5	Joshua Provoste	December 2, 2024
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload	Patched	CVE-2024-8126	7.5	TANG Cheuk Hei (siunam)	September 25, 2024
Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale	Patched	CVE-2024-8704	7.2	TANG Cheuk Hei (siunam)	September 25, 2024
Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload	Patched	CVE-2024-8725	6.8	TANG Cheuk Hei (siunam)	September 25, 2024
Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing	Patched	CVE-2024-5598	7.5	emad	June 28, 2024
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access	Patched	CVE-2023-3814	6.6	Dmitrii Ignatyev	August 14, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation