WordPress wp-file-manager has 8 known advisories in the phpwarden feed, 1 actively exploited. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2020-25213 KEV | Unauthenticated arbitrary file upload to RCE via the elFinder connector | critical | 10.0 | <6.9 | 6.9 |
| CVE-2024-1538 | The File Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.2.4. This is due t | high | 8.8 | <7.2.5 | 7.2.5 |
| CVE-2023-6825 | The File Manager and File Manager Pro plugins for WordPress are vulnerable to Directory Traversal in versions up to, and including version 7 | critical | 9.9 | <=7.2.1 or <=8.3.4 | – |
| CVE-2018-16967 | There is an XSS vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parame | medium | 6.1 | =3.0 | – |
| CVE-2024-0761 | The File Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.2.1 due to ins | high | 8.1 | <=7.2.1 | – |
| CVE-2018-16966 | There is a CSRF vulnerability in the mndpsingh287 File Manager plugin 3.0 for WordPress via the page=wp_file_manager_root public_path parame | high | 8.8 | =3.0 | – |
| CVE-2024-2654 | The File Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 7.2.5 via the fm_download_b | medium | 6.8 | <7.2.6 | 7.2.6 |
| CVE-2018-25105 | The File Manager plugin for WordPress is vulnerable to authorization bypass due to a missing capability check in the /inc/root.php file in | critical | 9.8 | <=3.0 | – |
Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden wordpress /var/www/html
Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.
Install docs How findings are ranked