File Manager

Older reviews praise ease of use and file management, but the newest reviews report the plugin being hacked or ruining sites.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

365 searches this plugin appeared in over the last 90 days, 20 listed. 272 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 86% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 4 years ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

1. ★★★★★ noahwillyams

   4mo ago

   Very useful and easy to use; we recommend it.

   Read on wp.org ↗
2. ★★★★★ proarab

   4mo ago

   لقد تم تهكير موقعي بسبب هذه الإضافة لا انصح بها على الأطلاق

   Read on wp.org ↗
3. ★★★★★ mustaqbaluna

   4mo ago

   Everyone needs to be careful with this plugin; it ruined my website. This topic was modified 4 days, 11 hours ago by mustaqbaluna.

   Read on wp.org ↗
4. ★★★★★ gardenal

   4mo ago

   best mananger plugin

   Read on wp.org ↗
5. ★★★★★ MooMee

   4mo ago

   After hosting provider made almost impossible to upload / edit files via FTP, WP File Manager came to help. Now can upload / edit our custom code.

   Read on wp.org ↗
6. ★★★★★ rpagames

   5mo ago

   easy to use and simple interface thanks

   Read on wp.org ↗
7. ★★★★★ dannnii0722

   5mo ago

   a nice plugin that is easy to use

   Read on wp.org ↗
8. ★★★★★ douglasmelvin

   5mo ago

   I’ve been using this File Manager on my WordPress website and I’m genuinely very impressed with it. It’s clean, intuitive, and makes managing files on my site incredibly simple, even without technical experience. One of the standout features for me is the ability to add and manage sub-domains directly through the tool. This has made expanding my website structure so much easier and more efficient than I expected. Everything feels well-organised, and I can quickly access, edit, and manage files without any hassle. Overall, it’s a powerful yet easy-to-use solution that adds real value to my website workflow. I would highly recommend it to anyone looking for a reliable File Manager with extra functionality like sub-domain management.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 8.0.4 Fixed elFinder bgcolor escaping issue 8.0.4
2. — Version 8.0.3 Security fixes. 8.0.3
3. — Version 8.0.2 Core libraries updated. 8.0.2
4. — Version 8.0.1 Checked compatibility with WordPress 6.7.1 8.0.1
5. — Version 8.0 Broken Image Fixes 8.0
6. — Version 7.2.10 Compatible with WordPress 6.6.1 7.2.10

All 16 disclosed vulnerabilities are patched in the current version (8.0.7). Sites still on an older version should update.

1. Patched Medium · 6.1 Multiple elFinder Plugins <= 8.0.4 - Reflected Cross-Site Scripting ↗
   2026-09-24 CVE-2026-85081 Improper Neutralization of Input During Web Page Generation Affects <= 8.0.4 Patched in 8.0.5
2. Patched Medium · 5.3 File Manager 7.2.2 - 8.0.4 - Unauthenticated Information Exposure ↗
   2026-09-24 CVE-2026-19708 Exposure of Sensitive Information to an Unauthorized Actor Affects 7.2.2 - 8.0.4 Patched in 8.0.5
3. Patched High · 7.2 Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution ↗
   2026-06-15 CVE-2026-6382 Improper Control of Generation of Code Affects < 8.0.4 Patched in 8.0.4
4. Patched Medium · 4.3 File Manager <= 7.2.7 - Missing Authorization ↗
   2024-06-27 CVE-2024-37254 Missing Authorization Affects <= 7.2.7 Patched in 7.2.8
5. Patched Medium · 6.8 File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal ↗
   2024-04-03 CVE-2024-2654 Path Traversal: '.../...//' Affects <= 7.2.5 Patched in 7.2.6
6. Patched High · 8.8 File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion ↗
   2024-03-20 CVE-2024-1538 Cross-Site Request Forgery Affects <= 7.2.4 Patched in 7.2.5
7. Patched Critical · 9.9 File Manager And File Manager Pro (Multiple Versions) - Directory Traversal ↗
   2024-03-04 CVE-2023-6825 Relative Path Traversal Affects <= 7.2.1 Patched in 7.2.2
8. Patched High · 8.1 File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames ↗
   2024-01-22 CVE-2024-0761 Use of Insufficiently Random Values Affects <= 7.2.1 Patched in 7.2.2
9. Patched Medium · 5.4 WP File Manager <= 7.0 - Reflected Cross-Site Scripting ↗
   2021-02-26 CVE-2021-24177 Improper Neutralization of Input During Web Page Generation Affects < 7.1 Patched in 7.1
10. Patched Critical · 9.8 File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution ↗
    2020-09-01 CVE-2020-25213 Unrestricted Upload of File with Dangerous Type Affects <= 6.8 Patched in 6.9
11. Patched High · 7.5 WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups ↗
    2020-08-13 CVE-2020-24312 Files or Directories Accessible to External Parties Affects <= 6.4 Patched in 6.5
12. Patched Medium · 6.3 File Manager <= 4.8 - Missing Authorization on AJAX Actions ↗
    2019-08-07 Missing Authorization Affects <= 4.8 Patched in 4.9
13. Patched Medium · 6.1 File Manager <= 3.0 - Stored Cross-Site Scripting ↗
    2018-09-17 CVE-2018-16967 Improper Neutralization of Input During Web Page Generation Affects <= 3.0 Patched in 3.1
14. Patched Critical · 9.8 File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download ↗
    2018-09-17 CVE-2018-25105 Missing Authorization Affects <= 3.0 Patched in 3.1
15. Patched High · 8.8 File Manager <= 3.0 - Cross-Site Request Forgery ↗
    2018-09-17 CVE-2018-16966 Cross-Site Request Forgery Affects <= 3.0 Patched in 3.1
16. Patched Medium · 6.1 File Manager <= 2.9 - Reflected Cross-Site Scripting ↗
    2018-09-06 CVE-2018-16363 Improper Neutralization of Input During Web Page Generation Affects < 3.0 Patched in 3.0

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2022-10-19 900K+ → 1M+ up after 225 days in tier
2. 2022-03-08 800K+ → 900K+ up after 138 days in tier
3. 2021-10-21 700K+ → 800K+ up after 190 days in tier
4. 2021-04-14 600K+ → 700K+ up after 192 days in tier
5. 2020-10-04 700K+ → 600K+ down after 33 days in tier
6. 2020-09-01 600K+ → 700K+ up after 75 days in tier
7. 2020-06-18 400K+ → 600K+ up after 229 days in tier
8. 2019-11-02 200K+ → 400K+ up after 463 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for File Manager into a readme, a review or a deck. It updates itself.

File Manager: 1M+ active installs, 4.6★ (1,492 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wp-file-manager