saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution version is affected

Latest saadiqbal Advanced File Manager – Ultimate File Manager for WordPress And Document Library Solution vulnerabilities

CVE-2026-79627 — Advanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff Bypass (CVSS 7.1)
CVE-2026-11565 — Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui (CVSS 8.5)
CVE-2026-15009 — Advanced File Manager <= 5.4.12 - Reflected Cross-Site Scripting via postMessage 'soundFile' Parameter (CVSS 6.1)
CVE-2026-6382 — Multiple elFinder Plugins - Authenticated OS Command Injection (CVSS 9.1)
CVE-2025-0818 — Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion (CVSS 6.5)
CVE-2025-47688 — WordPress Advanced File Manager plugin <= 5.3.1 - Broken Access Control to Notice Dismissal vulnerability (CVSS 9.8)
CVE-2024-13805 — Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload (CVSS 5.4)
CVE-2024-13333 — Advanced File Manager 5.2.12 - 5.2.13 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5)
CVE-2024-11391 — Advanced File Manager <= 5.2.10 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 7.5)
CVE-2024-8725 — Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Limited File Upload (CVSS 5.4)
CVE-2024-8704 — Advanced File Manager <= 5.2.8 - Authenticated (Administrator+) Local JavaScript File Inclusion via fma_locale (CVSS 7.2)
CVE-2024-8126 — Advanced File Manager <= 5.2.8 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
CVE-2024-5598 — Advanced File Manager <= 5.2.4 - Sensitive Information Exposure via Directory Listing (CVSS 7.5)
CVE-2023-3814 — Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access (CVSS 4.9)