Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in Advanced File Manager 5.2.8

  • Severity: high-risk
  • Status: Fixed
  • Publication: September 25, 2024

The Advanced File Manager plugin for WordPress has a security vulnerability that affects all versions up to 5.2.8. This allows attackers with high level access to include and run any files they want on the server, including PHP code. This can lead to bypassing security measures, accessing confidential information, or executing code by uploading seemingly harmless file types like images.

Detected in:

Advance File Manager – Ultimate File Manager And Document Library fixed vulnerable versions:
Advanced File Manager fixed vulnerable versions: >= * <= 5.2.8
Advanced File Manager – Ultimate WP File Manager And Document Library Solution fixed vulnerable versions:
Advanced File Manager — Ultimate WordPress File Manager and Document Library Plugin fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.