Vulnerabilities > Bitapps > File Manager
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-09-10 | CVE-2024-7770 | Unrestricted Upload of File with Dangerous Type vulnerability in Bitapps File Manager The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload' function in all versions up to, and including, 6.5.5. | 8.8 |
| 2024-09-05 | CVE-2024-7627 | Race Condition vulnerability in Bitapps File Manager The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. | 8.1 |
| 2023-12-20 | CVE-2022-47599 | Deserialization of Untrusted Data vulnerability in Bitapps File Manager Deserialization of Untrusted Data vulnerability in File Manager by Bit Form Team File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager.This issue affects File Manager – 100% Free & Open Source File Manager Plugin for WordPress | Bit File Manager: from n/a through 5.2.7. | 7.2 |
| 2023-12-11 | CVE-2023-5907 | Files or Directories Accessible to External Parties vulnerability in Bitapps File Manager The File Manager WordPress plugin before 6.3 does not restrict the file managers root directory, allowing an administrator to set a root outside of the WordPress root directory, giving access to system files and directories even in a multisite setup, where site administrators should not be allowed to modify the sites files. | 6.5 |