Extension WordPress
Vulnérabilités File Manager
Cette page rassemble les failles publiées pour File Manager, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de File Manager
9 fiches
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 – Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.7…
*-6.7
6.8
02/06/2025
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 – Authenticated (Subscriber+) Limited JavaScript File Upload
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.5.7. This is due…
*-6.5.7
6.5.8
04/10/2024
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 – Authenticated (Subscriber+) Arbitrary File Upload
The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all…
*-6.5.5
6.5.6
09/09/2024
Bit File Manager 6.0 – 6.5.5 – Unauthenticated Remote Code Execution via Race Condition
The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file…
6.0-6.5.5
6.5.6
04/09/2024
File Manager <= 6.3 – Authenticated (Admin+) Arbitrary OS File Access via Path Traversal
The File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.2 via the Root Folder…
*-6.2
6.3
20/11/2023
Bit File Manager <= 5.2.7 – Authenticated (Admin+) PHP Object Injection
The Bit File Manager plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 5.2.7 via deserialization of untrusted input from the 'language' setting parameter. This allows authenticated attackers, with administrative privileges and…
*-5.2.7
6.0
28/04/2023
Bit File Manager – 100% free file manager for WordPress <= 5.2.2 – Subscriber+ Arbitrary File Creation/Upload/Deletion
The Library File Manager WordPress plugin before 5.2.3 is using an outdated version of the elFinder library, which is known to be affected by security issues (CVE-2021-32682), and does not have any authorisation as well as CSRF checks…
*-5.2.2
5.2.3
14/03/2022
Bit File Manager <= 5.0.0 – Information Disclosure
inc/logger.php in the Giribaz File Manager plugin before 5.0.2 for WordPress logged activity related to the plugin in /wp-content/uploads/file-manager/log.txt. If a user edits the wp-config.php file using this plugin, the wp-config.php contents get added to log.txt, which is…
*-5.0.0
5.0.2
02/03/2018
Bit File Manager <= 4.1.4 – Cross-Site Request Forgery to Arbitrary File Upload
The Bit File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.1.4. This is due to missing or incorrect nonce validation on the plugin's upload form. This makes it possible…
[*, 4.1.5)
4.1.5
01/03/2017
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.