File Manager Pro – Filester
File Manager Pro – Filester has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 11 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 7 high. 2024 was the busiest year with 4 disclosures.
The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 3 of the records (27%). Other recurring categories include Cross-Site Scripting, Missing Authorization.
Every one of the 11 issues recorded for File Manager Pro – Filester has a vendor fix available, so running the current release closes all known holes.
8 independent researchers contributed these findings, most of them (3) reported by TANG Cheuk Hei (siunam). File Manager Pro – Filester is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2023-4827File Manager Pro – Filester - <= 1.7.6 - Cross-Site Request Forgery to Arbitrary File Rename
Read the full analysisVulnerability Records

File Manager Pro – Filester
Author
Ninja Team
Filester is a WP File Manager Pro plugin, but you can download and use it completely for free. It comes with all the premium features of other WordPress advanced file manager plugins out there. Filester helps you manage WordPress file directory and edit your website’s base configuration details, while FileBird allows you to manage/upload/download media library folders. With this File Manager Pro, you can copy, paste, create an archive, download, upload, edit, delete, preview, duplicate, and get info of the WordPress configuration and directory files without FTP access. This file manager plugin is dedicated to boosting your productivity in managing WordPress. All necessary file operations are fully provided and tested on a variety of servers and browsers. Another thing you will appreciate about it is the clean and compact UI/UX, which makes editing and transferring directory files and folders extra fast. Did you know? More than 700,000 WordPress websites were attacked during September 2020. Malicious bots are looking to exploit vulnerable versions of WP file manager plugins. Fortunately, Filester comes with this vulnerability fixed! Filester poses no risk to you, so rest assured! 🤗 ⚡️ FEATURES Drag & drop interface: Easily move and arrange files Smart context menu: Right-click on any files to make operations Manage files and folders: Copy, move, upload, create folder/file, rename, duplicate, etc. Built-in advanced code editor: Integrated development environment ACE Editor, CodeMirror, CKEditor, TinyMCE, and others Flexible configuration: Access rights, uploadable file types/extensions, maximum file size limit, and more Create/extract archives: .zip, .rar, .xz, .tar, .gzip Great UI/UX design: Clean, high-quality & productivity-driven User authority settings: File extensions to be locked, file visibility, root path access, .htaccess file Edit media files: Using Photopea & TUI Image Editor Multiple languages supported: English, German, Spanish, Italian, French, Japanese, etc. RTL supported: Hebrew, Arabic, Persian, Kurdish, etc. 🙌 OTHER FEATURES Local file system Simple client-server API based on JSON List and icon view Multi-root support Hidden files/folders options Set hidden files for other users Root path for each user role Easy to navigate 6 themes for your preferred interface 🔑 HOW IT WORKS Filester plugin helps you easily manage WordPress files so that you don’t have to access directories via FTP or cPanel. This plugin creates a new menu File Manager in your WordPress dashboard. From then on, you can view all server files, configuration, and media files on your current WordPress website. You can edit, copy, upload/download files/folders to your server from File Manager section. This toolbar is similar to the settings in an FTP client. It allows you to preview, edit, upload, download, duplicate and delete files or folders. With Filester, it’s easy to modify the auto-update mechanism with each new version of WordPress. You can quickly search for specific text or code within your WordPress files and replace it efficiently. With built-in code editors, you can edit code files with syntax highlighting and code completion features for themes, plugins, and custom code snippets. It takes one click to download a plugin’s ZIP file to your local storage. It helps track changes made to files and revert to previous versions if needed. All webmasters can also download WordPress media library using Filester download options as well. Yet the media files are organized in month- and year-based folders. 🎏 COMPATIBILITY Filester works seamlessly with all major WordPress themes, page builders, and website builders. 💙 Like Filester? Write us a review here ✨ 👉 Explore recommended plugins and themes: Brandy – WooCommerce theme, sales-first design. Shadcn – Minimal. Clean code. Beautiful blocks. Zero clutter. YaySMTP – Clean & lightweight WordPress SMTP plugin. CREDIT Big thanks to elFinder – Open-source file manager for web.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C