Unknown File Manager

• CVE-2026-85081 High 7.5 Multiple elFinder Plugins - DOM-based XSS via postMessage Origin Bypass 0.2%
• CVE-2026-19708 Medium 5.9 File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure 0.2%
• CVE-2026-17542 High 7.5 Bit File Manager < 6.9.1 - Subscriber+ Sensitive Data Disclosure via bitapps_fm_connector 0.4%
• CVE-2026-17541 High 7.5 Bit File Manager < 6.9.1 - Unauthenticated File Activity Log Disclosure 0.4%
• CVE-2026-17540 High 8.8 Bit File Manager < 6.9.1 - Subscriber+ Arbitrary File Read and Deletion via Connector Command Request-Source Mismatch 1.8%
• CVE-2026-6382 Critical 9.1 Multiple elFinder Plugins - Authenticated OS Command Injection 1.4%
• CVE-2023-5907 Medium 6.5 File Manager < 6.3 - Admin+ Arbitrary OS File/Folder Access + Path Traversal 0.9%
• CVE-2021-24177 Unrated WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS) 0.9%