Pricing
Case studies
Login
Start trial
Frontend File Manager
N/A
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
No VDP
Claim ownership
Report vulnerability
Vulnerabilities
Security Contributors
Vulnerability history
2 present
19 fixed
7 Mitigation rules
Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary File Renaming vulnerability
<= 23.4
Nov 25, 2025
Broken Access Control vulnerability
<= 23.2
Oct 30, 2025
Broken Access Control vulnerability
<= 23.3
Sep 22, 2025
Missing Authorization to Unauthenticated Arbitrary Post Deletion vulnerability
<= 21.5
Jul 24, 2025
Content Injection vulnerability
<= 23.4
Jul 4, 2025
Sensitive Data Exposure vulnerability
<= 22.7
Feb 12, 2024
Editor+ Arbitrary File Download vulnerability
< 22.6
Nov 13, 2023
File Upload via Cross-Site Request Forgery (CSRF) vulnerability
<= 21.3
Sep 26, 2022
Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability
<= 21.3
Sep 26, 2022
Authenticated Arbitrary File Upload vulnerability
<= 21.2
Sep 7, 2022
Unauthenticated File Renaming vulnerability
<= 21.2
Sep 7, 2022
Privilege Escalation vulnerability
<= 17.1
Jul 12, 2021
Unauthenticated Content Injection and Stored XSS vulnerabilities
<= 18.2
Jul 12, 2021
Authenticated Settings Change and Arbitrary File Upload vulnerabilities
<= 18.2
Jul 12, 2021
Unauthenticated HTML Injection vulnerability
<= 18.2
Jul 12, 2021
Unauthenticated Post Meta Change and Arbitrary File Download vulnerability
<= 18.2
Jul 12, 2021
Unauthenticated Arbitrary Post Deletion vulnerability
<= 18.2
Jul 12, 2021
Arbitrary File Upload
<= 3.9
Sep 19, 2016
Arbitrary File Upload
<= 1.9
Jun 11, 2015
Arbitrary File Upload
<= 3.7
Jun 11, 2015
Unrestricted File Upload
<= 3.3
Aug 18, 2014