File Manager

78 Quality Score

Active Installs

18/30

A 60/30 popularity score reflects 10,000 active installs, which is solid but modest compared to the leading wp-file-manager fork sitting at 1,000,000 installs.

Update Freshness

25/25

Maintenance scores a perfect 100/25, with an update timestamped July 2026 and tested compatibility against WordPress 7.0, signalling an actively maintained codebase.

User Rating

13/15

A user rating of 86/100 from 201 reviews indicates above-average satisfaction from a reasonably sized sample of evaluators.

Support Health

8/15

Support health sits at 50/15, driven by zero support threads and zero resolved tickets, so there is essentially no public track record of help quality.

WP Compatibility

15/15

Compatibility scores a full 100/15, with broad PHP 7.4+ and WordPress 5.0+ requirements plus confirmation against WordPress 7.0.

Scores higher than 67% of indexed plugins

About

Manage WordPress files and folders from your dashboard with a built-in code editor: upload, edit, delete, move, rename, and archive, no FTP needed.

Active Installs 10k+

Rating ★★★★ 4.3/5

Last Updated 2026-09-02 11:04am GMT

Requires WordPress 5.0+

Tested Up To 7.1.2

Requires PHP 7.4+

Security History

16 known vulnerabilities, all patched

8 High 7 Medium 1 Low

Most recent: September 24, 2026

View details ▸

File Manager 7.2.2 - 8.0.4 - Unauthenticated Information Exposure Medium

September 24, 2026 Patched in ["8.0.5"] CVE-2026-19708

Multiple elFinder Plugins <= 8.0.4 - Reflected Cross-Site Scripting Medium

September 24, 2026 Patched in ["8.0.5"] CVE-2026-85081

File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter High

August 5, 2026 Patched in ["6.9.1"] CVE-2026-15991

Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Information Exposure Medium

August 4, 2026 Patched in ["6.9.1"] CVE-2026-17542

Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Arbitrary File Read Medium

August 4, 2026 Patched in ["6.9.1"] CVE-2026-17540

Bit File Manager <= 6.9.0 - Unauthenticated File Activity Log Disclosure Medium

August 4, 2026 Patched in ["6.9.1"] CVE-2026-17541

Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution High

June 15, 2026 Patched in ["8.0.4"] CVE-2026-6382

Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads Medium

June 2, 2025 Patched in ["6.8"] CVE-2025-1725

Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload Medium

October 4, 2024 Patched in ["6.5.8"] CVE-2024-8743

Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload High

September 9, 2024 Patched in ["6.5.6"] CVE-2024-7770

Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition High

September 4, 2024 Patched in ["6.5.6"] CVE-2024-7627

File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal Low

November 20, 2023 Patched in ["6.3"] CVE-2023-5907

Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection High

April 28, 2023 Patched in ["6.0"] CVE-2022-47599

Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion High

March 14, 2022 Patched in ["5.2.3"] CVE-2022-0403

Bit File Manager <= 5.0.0 - Information Disclosure High

March 2, 2018 Patched in ["5.0.2"] CVE-2018-7204

Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload High

March 1, 2017 Patched in ["4.1.5"]

What It Does

File Manager provides a web-based file browser inside the WordPress admin dashboard, letting you upload, edit, delete, move, and rename files on your server without launching an FTP client or cPanel. It exposes the full filesystem through an AJAX-driven UI, including text editing, archive operations (zip/unzip), and permission controls. In practice, it replaces standalone FTP work for routine file tasks.

Who It's For

This plugin fits site owners and developers who need quick, one-off file edits on WordPress sites where shelling out to FTP is inconvenient, such as managing htaccess edits, plugin tweaks, or log inspection. It is well suited to freelancers juggling many client sites or small teams without dedicated DevOps support.

Who Should Skip It

If you only need to manage media uploads, the native WordPress Media Library or a folder plugin like FileBird is a safer choice, since exposing the full filesystem is unnecessary risk. Developers on properly configured servers with SSH access will also find FTP-style tools redundant.

The Bottom Line

File Manager earns an overall quality score of 78.31/100, with strong maintenance and compatibility offsetting a thin support footprint and middling adoption. It is a competent, actively updated filesystem browser for users who understand the security trade-offs of in-dashboard file access. Beginners should weigh the proven wp-file-manager fork or a media-focused tool first.

Related Plugins

File Manager 88/100

Pick the wp-file-manager fork if you want the same feature set backed by 1,000,000 installs and a longer community history.

Download Monitor 90/100

Choose Download Monitor when your goal is tracking and gating file downloads rather than browsing the filesystem directly.

FileOrganizer – WordPress File Manager 86/100

Pick FileOrganizer if you prefer a file manager that also integrates tighter with the standard Media Library workflow.

FileBird – WordPress Media Library Folders & File Manager 85/100

Choose FileBird when organizing media into folders is the priority and full filesystem access is not needed.

File Manager Pro – Filester 85/100

Pick Filester if you want a commercial-grade file manager with pro features and dedicated support options.

Use Cases

web developer freelance designer blogger small business website WordPress consultant non-technical site owner digital agency content creator e-commerce store owner WordPress maintenance service