UpHeron
All vulnerabilities

WordPress plugins

CVE-2025-0818

File Manager Pro – Filester: Path Traversal

Severity
Medium 6.5
Published
12 Aug 2025
Added to UpHeron
21 Oct 2026
Fixed in
1.9, 5.4.0
Also known as
WPV-16889efbd118, WPV-e63a0e56162a
Sources
WPVulnerability

Affected software

SoftwareAffected versions
File Manager Advanced (WordPress plugin)WordPress plugins · wp-plugin:file-manager-advanced
  • Every version before 5.4.0
Filester (WordPress plugin)WordPress plugins · wp-plugin:filester
  • Every version before 1.9

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-0818
  • Wordfence https://www.wordfence.com/threat-intel/vulnerabilities/detail/multiple-elfinder-plugins-various-versions-directory-traversal-to-arbitrary-file-deletion