Skip to content
PluginCanary

File Manager

by Bit Apps · 10,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: 5 vulnerabilities published in the last 24 months.

86/ 100 Canary Score
Sub-scores for File Manager
Ownership100
Maintenance100
Security70
Support70
Reputation85

How the score works

Active signals

Facts we detected, with links to the source.

  • InfoSEC-35 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
aihimel4 Feb 2016 to 19 Apr 2022, 105 commits
bitpressadmin29 Aug 2022 to 29 Oct 2026, 88 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
6 days ago
Releases, 24 months
18
Tested up to
7.1 current
Requires PHP
8.0 supported 8.2+
Releases per quarter for File Manager
Q1 20243
Q2 20244
Q3 20242
Q4 20244
Q1 20252
Q2 20254
Q3 20250
Q4 20253
Q1 20261
Q2 20262
Q3 20263
Q4 20261

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
5 Aug 2026File Manager 6.0 - 6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read and Deletion via 'cmd' Query Parameter8.86.0 to 6.96.9.10
4 Aug 2026Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Information Exposure4.3<= 6.9.06.9.10
4 Aug 2026Bit File Manager <= 6.9.0 - Unauthenticated File Activity Log Disclosure5.3<= 6.9.06.9.10
4 Aug 2026Bit File Manager <= 6.9.0 - Authenticated (Subscriber+) Arbitrary File Read6.5<= 6.9.06.9.10
2 Jun 2025Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Uploads6.4<= 6.76.80
4 Oct 2024Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.7 - Authenticated (Subscriber+) Limited JavaScript File Upload6.8<= 6.5.76.5.80
9 Sep 2024Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress <= 6.5.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 6.5.56.5.60
4 Sep 2024Bit File Manager 6.0 - 6.5.5 - Unauthenticated Remote Code Execution via Race Condition8.16.0 to 6.5.56.5.60
20 Nov 2023File Manager <= 6.3 - Authenticated (Admin+) Arbitrary OS File Access via Path Traversal2.2<= 6.26.30
28 Apr 2023Bit File Manager <= 5.2.7 - Authenticated (Admin+) PHP Object Injection7.2<= 5.2.76.027
14 Mar 2022Bit File Manager – 100% free file manager for WordPress <= 5.2.2 - Subscriber+ Arbitrary File Creation/Upload/Deletion8.8<= 5.2.25.2.315
2 Mar 2018Bit File Manager <= 5.0.0 - Information Disclosure7.5<= 5.0.05.0.2356
1 Mar 2017Bit File Manager <= 4.1.4 - Cross-Site Request Forgery to Arbitrary File Upload8.8< 4.1.54.1.5n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for File Manager
Q4 20235.0
Q1 20244.7
Q3 20245.0
Q4 20245.0
Q2 20255.0
Q3 20255.0
Q3 20265.0

Average rating stayed at 5.0 between Q4 2023 and Q3 2026.

Rating distribution
5 star158
4 star11
3 star2
2 star3
1 star28
Latest low reviews

Momentum

10,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for File Manager
4 May 202651
11 May 202653
18 May 202676
25 May 202682
1 Jun 202673
8 Jun 20264,756
15 Jun 20262,093
22 Jun 20261,560
29 Jun 20261,429
6 Jul 20266,973
13 Jul 20261,837
20 Jul 20261,912
27 Jul 20262,255
3 Aug 20268,948
10 Aug 20262,300
17 Aug 20261,891
24 Aug 20261,853
31 Aug 20266,968
7 Sep 20262,462
14 Sep 20262,632
21 Sep 20262,163
28 Sep 20262,346
5 Oct 20261,713
12 Oct 20261,686
19 Oct 20261,907
26 Oct 20266,070
2 Nov 2026524

Weekly downloads over the last 4 weeks are 3% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

No healthier plugin in the same category yet.

Facts

Version7.0
AuthorBit Apps
Added4 Feb 2016
Last updated29 Oct 2026
Active installs10,000+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP8.0
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsftp, files, file manager, wp file manager, wordpress file manager

Other plugins by this author: Bit integrations - Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation, Bit Form - Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder, Chat Widget: Floating Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat - Bit Assist, Bit Social - Social Media Auto Poster and Scheduler, Bit SMTP - Easy SMTP Solution with Email Logs, Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More, Bit CRM: Sales CRM Manage Lead, Contact, Deal, Invoice, Client Portal & Collect Payment, Bit Connect - Community, Discussion Forum, Feedback & Roadmap

Questions

Is File Manager still maintained?

File Manager was last updated on 29 Oct 2026. Its Canary status is Healthy.

Is File Manager safe?

File Manager has no open unpatched vulnerabilities on record. 5 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns File Manager?

The wordpress.org author is Bit Apps. Recent committers: bitpressadmin, aihimel, plugin-master. We have recorded no ownership change.

What can I use instead of File Manager?

We have no healthier plugin in the same category on record yet.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue