File Manager Pro

File Manager Pro has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 8 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 5 high. 2024 was the busiest year with 7 disclosures.

The most common weakness is Code Injection, behind 2 of the records (25%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type, Cross-Site Request Forgery (CSRF).

Every one of the 8 issues recorded for File Manager Pro has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (4) reported by TANG Cheuk Hei (siunam).

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all File Manager Pro vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2023-6825

File Manager And File Manager Pro (Multiple Versions) - Directory Traversal

Read the full analysis

Vulnerability Records

8 records


2025-08-12 00:00	Multiple elFinder Plugins <= (Various Versions) - Directory Traversal to Arbitrary File Deletion File Manager Pro <= 8.4.2	`CVE-2025-0818`	6.5 Medium	tiborisaak	Yes
2024-10-15 00:00	File Manager Pro <= 8.3.9 - Unauthenticated Limited JavaScript File Upload File Manager Pro <= 8.3.9	`CVE-2024-8918`	7.4 High	TANG Cheuk Hei (siunam)	Yes
2024-10-15 00:00	File Manager Pro <= 8.3.9 - Unauthenticated Backup File Download and Upload File Manager Pro <= 8.3.9	`CVE-2024-8746`	7.5 High	TANG Cheuk Hei (siunam)	Yes
2024-10-15 00:00	File Manager Pro <= 8.3.9 - Cross-Site Request Forgery to Arbitrary File Upload File Manager Pro <= 8.3.9	`CVE-2024-8507`	8.8 High	TANG Cheuk Hei (siunam)	Yes
2024-08-22 14:04	File Manager Pro <= 8.3.7 - Authenticated (Subscriber+) Arbitrary File Upload File Manager Pro <= 8.3.7	`CVE-2024-7559`	8.8 High	TANG Cheuk Hei (siunam)	Yes
2024-03-04 00:00	File Manager And File Manager Pro (Multiple Versions) - Directory Traversal File Manager Pro <= 8.3.4	`CVE-2023-6825`	9.9 Critical	Tobias Weißhaar (kun_19)	Yes
2024-02-20 00:00	File Manager Pro <= 8.3.4 - Reflected Cross-Site Scripting File Manager Pro <= 8.3.4	`CVE-2023-7015`	6.1 Medium	Tobias Weißhaar (kun_19)	Yes
2024-01-24 00:00	File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload File Manager Pro <= 8.3.4	`CVE-2023-6846`	8.8 High	Tobias Weißhaar (kun_19)	Yes

Showing 1–8 of 8 reports