bitpressadmin File Manager vulnerabilities

4 published CVEs name bitpressadmin File Manager among the affected products.

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-15991
File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter
bitpressadmin · File Manager
High8.8
CVE-2025-1725
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads
bitpressadmin · File Manager
Medium6.4
CVE-2024-8743
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload
bitpressadmin · File Manager
Medium6.8
CVE-2024-7770
Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload
bitpressadmin · File Manager
High8.8