plugin

Advanced File Manager Pro Premium Vulnerabilities

2 known security issues reported for the Advanced File Manager Pro Premium WordPress plugin. Most recent disclosed May 15, 2025.

1 high

Running Advanced File Manager Pro Premium on your site? Check whether your installed version is affected.

Scan your site free

Advanced File Manager Pro [advanced-file-manager-pro-premium] < 2.6.0

unknown

[en] The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortcode. This makes it possible for authenticated attackers,...

Affected:
up to 2.6.0
Fixed in:
2.6.0
Disclosed:
May 15, 2025

CVE-2024-13914 on NVD →

File Manager Advanced Shortcode <= Multiple Versions - Authenticated (Administrator+) Local JavaScript File Inclusion via Shortcode

high

The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5.6 (advanced-file-manager-pro-premium), via the 'file_manager_advanced' shortcode. This makes it possible for authenticated attackers, with...

CVSS:
7.2
Affected:
up to 2.5.6
Fixed in:
2.6.0
Disclosed:
May 14, 2025

CVE-2024-13914 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database