Vulnerability history

Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch vulnerability

Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector vulnerability

Unauthenticated File Activity Log Disclosure vulnerability

WordPress File Manager plugin 6.0-6.9 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion vulnerability

Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads vulnerability

Authenticated (Subscriber+) Limited JavaScript File Upload vulnerability

Authenticated (Subscriber+) Arbitrary File Upload vulnerability

Unauthenticated Remote Code Execution via Race Condition vulnerability

Admin+ Arbitrary OS File/Folder Access + Path Traversal vulnerability

PHP Object Injection vulnerability

Reflected Cross-Site Scripting (XSS) vulnerability

Arbitrary File Creation/Upload/Deletion vulnerability

Multiple Vulnerabilities

Authenticated Cross-Site Scripting (XSS) vulnerability

Information Disclosure vulnerability