Vulnerabilities / File Manager Pro – Filester
File Manager Pro – Filester vulnerabilities
Advisories WPSec published for File Manager Pro – Filester. Other sources may list more. Its attack surface: File Manager Pro – Filester on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-27 | WPSEC-2026-1785 | File Manager Pro – Filester <= 2.1.4 - Authenticated (Administrator+) Arbitrary File Upload via File Manager Settings on Multisite | Medium 6.6 | 2.1.5 |
| 2026-10-27 | WPSEC-2026-1784 | File Manager Pro – Filester <= 2.1.4 - Authenticated (Administrator+) Missing Authorization to Arbitrary Plugin Installation and Activation | Medium 6.6 | 2.1.5 |
| 2026-10-27 | WPSEC-2026-1783 | File Manager Pro – Filester <= 2.1.4 - Authenticated (Subscriber+) Arbitrary File Upload via File Manager Upload MIME Restrictions | High 7.5 | 2.1.5 |
| 2026-10-27 | WPSEC-2026-1782 | File Manager Pro – Filester <= 2.1.4 - Authenticated (Subscriber+) Limited Path Traversal to Sibling Directories via File and Folder Names | Low 3.1 | 2.1.5 |
License: CC BY 4.0