elfinder Known Exploited Vulnerabilities

Evidence-backed KEV intelligence for elfinder products — CISA KEV status, confidence, sensor telemetry, and virtual-patch availability.

Total KEVs

1

In CISA KEV

0

Beyond CISA KEV

1

Sensor Observed

0

Virtual Patch Available

0

elfinder KEVs Added by Year

Loading...

1 elfinder KEV added all time (primary attestation date).

Attested CVEs

CVE Confidence CISA KEV Added
CVE-2020-35235

vendor/elfinder/php/connector.minimal.php in the secure-file-manager plugin through 2.5 for WordPress loads elFinder code without proper access...

High Not in CISA 06 Jul 2025

Browse all known exploited vulnerabilities · What is a known exploited vulnerability? · Methodology