Skip to content
PluginCanary

File Manager

by mndpsingh287 · 1,000,000+ active installs · Checked 4 Nov 2026
Watch

Watch: held back by a low Support score (0 of 100).

76/ 100 Canary Score
Sub-scores for File Manager
Ownership100
Maintenance100
Security80
Support0
Reputation70

How the score works

Quick answers

Is File Manager still maintained?
Yes. Last release 30 Oct 2026, 0 releases in the last 24 months. 30 Oct 2026 · wordpress.org
Who owns File Manager, and has it changed hands?
No change recorded. Main committer mndpsingh287 since Aug 2016. 4 Nov 2026 · SVN log
Was File Manager removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is File Manager safe?
16 known vulnerabilities, all fixed (latest in 8.0.5). One was exploited in the wild before its fix. 24 Sep 2026 · Wordfence Intelligence
Is the latest File Manager update safe to install?
No ownership change before 8.0.7. No one-star spike after it. 19 May 2020 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
mndpsingh2879 Aug 2016 to 30 Oct 2026, 191 commits
Otto4214 Sep 2020 to 14 Sep 2020, 1 commits

2 committers recorded. No ownership change since 2016.

Maintenance

Last release
5 days ago
Releases, 24 months
0
Tested up to
7.1 current
Requires PHP
5.2.4 supported 8.2+
Releases per quarter
Releases per quarter for File Manager
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 30 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: 4.3 (6 reviews). Lifetime: 4.6.

Average rating per quarter for File Manager
Q1 20265.0
Q2 20265.0
Q3 20263.0
Q4 20265.0

Average rating stayed at 5.0 between Q1 2026 and Q4 2026.

Rating distribution
5 star1329
4 star28
3 star13
2 star13
1 star109
Latest low reviews

Security record

3 vulnerabilities in 24 months (16 on record), all patched (latest fixed in 8.0.5).

Show 16 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
24 Sep 2026File Manager 7.2.2 - 8.0.4 - Unauthenticated Information Exposure5.37.2.2 to 8.0.48.0.5n/a
24 Sep 2026Multiple elFinder Plugins <= 8.0.4 - Reflected Cross-Site Scripting6.1<= 8.0.48.0.5n/a
15 Jun 2026Multiple Plugins <= Multiple Versions - Authenticated Remote Code Execution7.2< 8.0.48.0.4n/a
27 Jun 2024File Manager <= 7.2.7 - Missing Authorization4.3<= 7.2.77.2.8n/a
3 Apr 2024File Manager <= 7.2.5 - Authenticated (Administrator+) Directory Traversal6.8<= 7.2.57.2.6n/a
20 Mar 2024File Manager <= 7.2.4 - Cross-Site Request Forgery to Local JS File Inclusion8.8<= 7.2.47.2.5n/a
4 Mar 2024File Manager And File Manager Pro (Multiple Versions) - Directory Traversal9.9<= 7.2.17.2.2n/a
22 Jan 2024File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames8.1<= 7.2.17.2.2n/a
26 Feb 2021WP File Manager <= 7.0 - Reflected Cross-Site Scripting5.4< 7.17.1n/a
1 Sep 2020File Manager <= 6.8 - Arbitrary File Upload/Remote Code Execution Exploited9.8<= 6.86.9n/a
13 Aug 2020WP File Manager <= 6.4 - Unauthenticated Resource Access to Site Backups7.5<= 6.46.5n/a
7 Aug 2019File Manager <= 4.8 - Missing Authorization on AJAX Actions6.3<= 4.84.9n/a
17 Sep 2018File Manager <= 3.0 - Unauthenticated Arbitrary File Upload/Download9.8<= 3.03.1n/a
17 Sep 2018File Manager <= 3.0 - Cross-Site Request Forgery8.8<= 3.03.1n/a
17 Sep 2018File Manager <= 3.0 - Stored Cross-Site Scripting6.1<= 3.03.1n/a
6 Sep 2018File Manager <= 2.9 - Reflected Cross-Site Scripting6.1< 3.03.0n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 5 support threads resolved in the last 2 months.

Momentum

1,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for File Manager
4 May 202632,889
11 May 2026102,495
18 May 2026155,963
25 May 202688,329
1 Jun 202679,746
8 Jun 2026108,029
15 Jun 202680,919
22 Jun 202693,263
29 Jun 202686,834
6 Jul 202671,082
13 Jul 202677,539
20 Jul 2026101,920
27 Jul 2026114,000
3 Aug 202689,689
10 Aug 202675,421
17 Aug 202698,370
24 Aug 202684,336
31 Aug 202675,991
7 Sep 202683,334
14 Sep 202680,634
21 Sep 2026408,136
28 Sep 2026153,546
5 Oct 2026180,686
12 Oct 2026100,196
19 Oct 2026107,849
26 Oct 2026399,507
2 Nov 202637,560

Weekly downloads over the last 4 weeks are 37% above the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Htaccess File EditorScore 100 · 40,000+WPIDEScore 91 · 40,000+File ManagerScore 89 · 10,000+FileOrganizerScore 87 · 200,000+File Manager ProScore 83 · 100,000+

Facts

Version8.0.7
Authormndpsingh287
Added9 Aug 2016
Last updated30 Oct 2026
Active installs1,000,000+
Requires WordPress4.0
Tested up to7.1.4
Requires PHP5.2.4
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsftp, elfinder, file manager, wp-filemanager, wp file manager

Other plugins by this author: Duplicate Page, Theme Editor, WP Mail, Sticky Header, Live Chat, Cryptocurrency Payment Gateway WooCommerce - MaxelPay, UTM Generator, Pattern Lock

Questions

Is File Manager still maintained?

Yes. Last release 30 Oct 2026, 0 releases in the last 24 months.

Who owns File Manager, and has it changed hands?

No change recorded. Main committer mndpsingh287 since Aug 2016.

Was File Manager removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is File Manager safe?

16 known vulnerabilities, all fixed (latest in 8.0.5). One was exploited in the wild before its fix.

Is the latest File Manager update safe to install?

No ownership change before 8.0.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue