File Manager

88 Quality Score

Active Installs

27/30

With 1,000,000 active installs, File Manager is one of the most widely used file management plugins in the WordPress ecosystem, signalling broad trust and a large community of users.

Update Freshness

25/25

The plugin was updated on 2026-04-21 and tested against WordPress 6.9.4, which means it is actively maintained and current with the latest core release.

User Rating

14/15

A 94 out of 100 from 1,480 reviewers indicates very high user satisfaction, well above typical WordPress plugin averages.

Support Health

8/15

Only 1 support thread is recorded, and while 100% of it is resolved, the tiny volume makes it hard to draw firm conclusions about responsiveness under heavier load.

WP Compatibility

15/15

Tested with WordPress 6.9.4 and requiring only PHP 5.2.4 and WordPress 4.0, the plugin is compatible with essentially any modern or legacy WordPress environment.

Scores higher than 98% of indexed plugins

About

file manager provides you ability to edit, delete, upload, download, copy and paste files and folders.

Active Installs 1M+

Rating ★★★★½ 4.6/5

Last Updated 2026-09-24 10:26am GMT

Requires WordPress 4.0+

Tested Up To 7.1.2

Requires PHP 5.2.4+

Security History

14 known vulnerabilities, all patched

3 Critical 5 High 6 Medium

Most recent: June 15, 2026

View details ▸

Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution High

June 15, 2026 Patched in ["8.0.4"] CVE-2026-6382

File Manager <= 7.2.7 - Missing Authorization Medium

June 27, 2024 Patched in ["7.2.8"] CVE-2024-37254

File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal Medium

April 3, 2024 Patched in ["7.2.6"] CVE-2024-2654

File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion High

March 20, 2024 Patched in ["7.2.5"] CVE-2024-1538

File Manager And File Manager Pro (Multiple Versions) - Directory Traversal Critical

March 4, 2024 Patched in ["7.2.2"] CVE-2023-6825

File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames High

January 22, 2024 Patched in ["7.2.2"] CVE-2024-0761

WP File Manager <= 7.0 - Reflected Cross-Site Scripting Medium

February 26, 2021 Patched in ["7.1"] CVE-2021-24177

File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution Critical

September 1, 2020 Patched in ["6.9"] CVE-2020-25213

WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups High

August 13, 2020 Patched in ["6.5"] CVE-2020-24312

File Manager <= 4.8 - Missing Authorization on AJAX Actions Medium

August 7, 2019 Patched in ["4.9"]

File Manager <= 3.0 - Stored Cross-Site Scripting Medium

September 17, 2018 Patched in ["3.1"] CVE-2018-16967

File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download Critical

September 17, 2018 Patched in ["3.1"] CVE-2018-25105

File Manager <= 3.0 - Cross-Site Request Forgery High

September 17, 2018 Patched in ["3.1"] CVE-2018-16966

File Manager <= 2.9 - Reflected Cross-Site Scripting Medium

September 6, 2018 Patched in ["3.0"] CVE-2018-16363

What It Does

File Manager brings a desktop-style file browser directly into the WordPress dashboard, letting you upload, edit, rename, copy, move, and delete files and folders without touching FTP or cPanel. It wraps the elFinder library in a WordPress interface so routine filesystem tasks happen in a few clicks. It also supports archive operations like zip and unzip, plus direct code editing for common file types.

Who It's For

This plugin is a strong fit for developers, agencies, and site owners who routinely need to manipulate files on the server without opening an FTP client or file manager from their host. It is especially useful on staging or development sites where quick edits, bulk uploads, or archive extraction are common. Freelancers managing many client installs will also appreciate the time saved on small filesystem tasks.

Who Should Skip It

If you only need to upload a few images or media files, the native WordPress media library already covers that and adds nothing in the way of risk. Shop owners, membership sites, or any installation where multiple users have dashboard access should avoid it, because exposing a full filesystem browser to non-technical users is a serious security concern.

The Bottom Line

File Manager scores 88.47 out of 100 on PluginCheck, backed by 1 million installs and a 94% user rating, making it a reliable choice for developers and agencies who genuinely need FTP-like access from wp-admin. The main caveat is not quality but responsibility: a full filesystem browser is a powerful tool and should be restricted to trusted administrators only. If that fits your workflow, this is one of the strongest options available.

Related Plugins

Download Monitor 90/100

Pick Download Monitor instead if your real need is tracking and gating file downloads rather than managing files on disk.

FileOrganizer 86/100

Choose FileOrganizer if you want a similar filesystem browser but prefer a lighter interface with 200,000 installs behind it.

FileBird 85/100

Choose FileBird if your primary need is organizing the media library into folders rather than editing arbitrary files on the server.

Filester 85/100

Choose Filester if you want a modern, polished file management UI and are willing to trade some install base for a more streamlined experience.

Advanced File Manager 84/100

Choose Advanced File Manager if you need an in-dashboard document library workflow in addition to basic filesystem management.