CVE-2026-79627: CWE-79 Cross-Site Scripting (XSS) in Advanced File Manager
Description
The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager access by an administrator to store a file containing script that is not stripped and that runs in the browser of anyone who opens it, including an administrator.
CVSS v3.1
Score 7.1high
Affected software
Advanced File Manager
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Advanced File Manager WordPress plugin before version 6.0.0 does not correctly determine if a stored file is an SVG prior to sanitization. This flaw allows users granted file-manager access by an administrator to upload files containing embedded scripts that are not stripped out. When such files are opened, the embedded scripts execute in the browser context of the viewer, including administrators, resulting in a stored cross-site scripting (XSS) vulnerability classified as CWE-79.
Potential Impact
An attacker with file-manager access can upload malicious SVG files containing executable scripts. These scripts run in the browsers of users who open the files, potentially leading to session hijacking, privilege escalation, or other malicious actions within the context of the affected WordPress site. The vulnerability affects users with elevated privileges and can compromise administrative accounts.
Mitigation Recommendations
Upgrade the Advanced File Manager plugin to version 6.0.0 or later, where this vulnerability has been fixed. No other mitigation guidance is provided, and patch status is confirmed by the version range indicating the fix in 6.0.0.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- WPScan
- Date Reserved
- 2026-08-25T09:15:20.560Z
- State
- PUBLISHED
Threat ID: 6ad855df2cdf04f656afec33
Added to database: 10/21/2026, 06:04:15 UTC
Last enriched: 10/21/2026, 06:19:18 UTC
Last updated: 10/21/2026, 13:40:20 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.