CVE-2025-53260: Getredhawkstudio File Manager Plugin For WordPress

Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in getredhawkstudio File Manager Plugin For Wordpress file-manager-plugin-for-wordpress allows Upload a Web Shell to a Web Server.This issue affects File Manager Plugin For Wordpress: from n/a through <= 7.5.

Affected products

• Getredhawkstudio File Manager Plugin For WordPress: up to and including 7.5

Published 2025-06-27. Last modified 2026-06-17.