bitpressadmin File Manager vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Latest bitpressadmin File Manager vulnerabilities

CVE-2026-15991 — File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter (CVSS 8.8)
CVE-2025-1725 — Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads (CVSS 6.4)
CVE-2024-8743 — Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload (CVSS 6.8)
CVE-2024-7770 — Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
CVE-2024-7627 — Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition (CVSS 8.1)
CVE-2022-47599 — WordPress File Manager Plugin <= 5.2.7 is vulnerable to PHP Object Injection (CVSS 7.2)
CVE-2023-5907 — File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal (CVSS 6.5)