All 7 CVE vulnerabilities found in Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution, with AI-generated Chinese analysis, references, and POCs.
Vendor: saadiqbal
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-15009 | Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter CWE-79 | 6.1 | Medium | 2026-08-16 |
| CVE-2024-13805 | Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload CWE-79 | 6.4 | Medium | 2025-03-07 |
| CVE-2024-11391 | Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 | 7.5 | High | 2024-12-03 |
| CVE-2024-8725 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload CWE-434 | 6.8 | Medium | 2024-09-26 |
| CVE-2024-8126 | Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 | 7.5 | High | 2024-09-26 |
| CVE-2024-8704 | Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale CWE-22 | 7.2 | High | 2024-09-26 |
| CVE-2024-5598 | Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing CWE-922 | 7.5 | High | 2024-06-29 |
All 7 known CVE vulnerabilities affecting Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution with full Chinese analysis, references, and POCs where available.