Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: saadiqbal

CVE IDTitleCVSSSeverityPublished
CVE-2026-15009 Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter CWE-79 6.1 Medium2026-08-16
CVE-2024-13805 Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload CWE-79 6.4 Medium2025-03-07
CVE-2024-11391 Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 7.5 High2024-12-03
CVE-2024-8725 Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload CWE-434 6.8 Medium2024-09-26
CVE-2024-8126 Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 7.5 High2024-09-26
CVE-2024-8704 Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale CWE-22 7.2 High2024-09-26
CVE-2024-5598 Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing CWE-922 7.5 High2024-06-29

All 7 known CVE vulnerabilities affecting Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution with full Chinese analysis, references, and POCs where available.