CVE-2023-3814: medium-severity vulnerability in Advanced File Manager
Advanced File Manager < 5.1.1 - Admin+ Arbitrary File/Folder Access
Published · Updated
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.9epss 0.6%
exploitation probability
0.6%top 51% of all CVEs
observed exploitation
nono source reports it
The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list and read arbitrary files and folders on the server.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
Unknown · Advanced File ManagerRelated CVEs — Advanced File Manager
In the same product, most dangerous first.
CVE-2026-6382CRITICALMultiple elFinder Plugins - Authenticated OS Command InjectionEPSS 1.4%CVE-2026-11565HIGHAdvanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_uiEPSS 1.3%CVE-2026-79627HIGHAdvanced File Manager 5.4.13 - 5.4.14 - Authenticated Stored XSS via SVG Sanitiser Content-Sniff BypassEPSS 0.3%