Sploitus

17 exploited vulnerabilities in Tiny File Manager

Vulnerabilities with publicly known exploits

Vendors
Unknown, WordPress, Prasathmani
With known exploits
17
Affected Prasathmani Tiny File Manager versions
≤ 2.4.7, 2.4.6
Affected 3dprint Project 3dprint versions
< 3.5.6.9

Vulnerabilities with exploits

Highest CVSS first — 6 of these already have exploit code on Sploitus

CVE-2022-40916 1 exploit
CVSS 9.8 CRITICAL 2025-02-06
Exploit for Cross-site Scripting in Tinyfilemanager_Project Tinyfilemanager
CVE-2022-45476
CVSS 9.8 CRITICAL 2022-11-25
CVE-2022-23044
CVSS 8.8 HIGH 2022-11-25
CVE-2022-1000
CVSS 8.8 HIGH 2022-03-17FIX AVAILABLE
CVE-2021-45010 7 exploits
CVSS 8.8 HIGH 2022-03-15FIX AVAILABLE
Exploit for Path Traversal in Tinyfilemanager_Project TinyfilemanagerExploit for Path Traversal in Tiny_File_Manager_Project Tiny_File_Manager
CVE-2022-3899 1 exploit
CVSS 8.1 HIGH 2024-01-16FIX AVAILABLE
3DPrint < 3.5.6.9 - Arbitrary File and Directory Deletion via CSRF
CVE-2020-12103
CVSS 7.7 HIGH 2020-04-28FIX AVAILABLE
CVE-2020-12102
CVSS 7.7 HIGH 2020-04-28FIX AVAILABLE
CVE-2025-15138
CVSS 7.2 HIGH 2025-12-28
CVE-2026-6497
CVSS 6.5 MEDIUM 2026-04-17FIX AVAILABLE
CVE-2022-45475
CVSS 6.5 MEDIUM 2022-11-25
CVE-2021-40964 4 exploits
CVSS 6.5 MEDIUM 2021-09-15FIX AVAILABLE
Exploit for Path Traversal in Tinyfilemanager_Project TinyfilemanagerTiny File Manager 2.4.6 - Remote Code Execution Exploit
CVE-2025-44998 1 exploit
CVSS 6.1 MEDIUM 2025-05-23FIX AVAILABLE
Exploit for Cross-site Scripting in Tinyfilemanager_Project Tinyfilemanager
CVE-2026-6496
CVSS 5.5 MEDIUM 2026-04-17FIX AVAILABLE
CVE-2022-4023 1 exploit
CVSS 5.3 MEDIUM 2023-07-17FIX AVAILABLE
3DPrint < 3.5.6.9 - CSRF to arbitrary file downlad
CVE-2022-40490
CVSS 4.8 MEDIUM 2025-02-06FIX AVAILABLE
CVE-2025-46651
CVSS 4.3 MEDIUM 2026-02-03FIX AVAILABLE