/ Plugin Category

/ Site Administration & Utilities

/ Site Migration & Cloning

/ File Manager

File Manager

By mndpsingh287

Site Administration & Utilities / Site Migration & Cloning

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

File Manager Review - In-Depth Analysis

File Manager allows you to manage files directly from the WordPress backend. Edit, delete, upload, download, and organize files without FTP.

Performance Overview

WPS Score

7.55/10

User Rating

4.6/5 (based on 1489+ reviews)

Active Installations

1,000,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

8.59 / 10 (High Risk) It is calculated using the weighted average of all versions.

What It Does

File Manager is a powerful plugin that enables you to edit, delete, upload, download, and manage files and folders directly from your WordPress dashboard. With this plugin, you can perform various operations such as copying, moving, and creating files without the need for FTP.

The plugin features a user-friendly interface with drag-and-drop capabilities, allowing for easy file management. You can create, archive, and extract files in multiple formats, and control file types for uploads and downloads. Additionally, it includes a built-in code editor with syntax checking to ensure code integrity.

File Manager supports multiple themes, offers file sharing via email, and provides comprehensive file details. The plugin is responsive and works seamlessly on mobile devices. You can also backup and restore files, making it a versatile tool for managing your WordPress site's files efficiently.

Comparing to Alternatives

File Manager is one of the most widely used file-browsing plugins for WordPress, and it competes with several other tools offering similar in-dashboard file access. While it remains popular for its simplicity, its long history of security patches sets it apart from newer or more security-focused alternatives.

Top alternatives

Strengths

Simple, familiar interface for browsing, editing, and managing WordPress files without FTP
Actively maintained with a strong track record of patching disclosed vulnerabilities
Free version is fully functional without aggressive upsells, according to users
Widely adopted with a large, long-standing user base

Weaknesses

Extensive history of vulnerabilities, including several critical remote code execution issues
Occasional usability bugs, such as folder navigation failing for some users
Being a high-value target for attackers due to its popularity and file-system access

User Sentiment Analysis

With 89% of ratings at 5 stars and an overall score of 4.6/5 across nearly 1,500 reviews, sentiment is largely positive. However, the 7.3% share of 1-star reviews stands out compared to typical plugins, hinting at a vocal minority reporting serious issues alongside the overwhelmingly satisfied majority.

Positive highlights

"A great way to access core files without cpanel" — slugob
"Fast, reliable, no problems at all... A great Thank you to the developer!" — Dimis99
"Bulk actions, filters, and quick edits make daily publishing so much easier" — theclov
"Plugin works great does what is supposed to do and doesn't plague you with popups to upgrade to Pro" — websitetalkingheads
"Easy to load up, easy to navigate, works well" — newsblaze

Common complaints

Folder navigation sometimes fails to work, blocking basic file browsing tasks
Concerns that the plugin has been the source of website hacks, with reports of hidden plugins appearing after compromise
Poor responsiveness from support for paid/pro activation issues, with users describing it as unresponsive for days

Weaknesses

A long and serious vulnerability history, including multiple critical CVSS 9-10 issues like unauthenticated arbitrary file upload and directory traversal
Security risk score of 8.73/10 reflects a pattern of recurring, high-severity flaws rather than an isolated incident
User-reported hacking incidents align with the plugin's documented vulnerability record
Support responsiveness appears inconsistent for some paid users

Who Should Use This?

Best for

Developers and site administrators who need quick, convenient file access from the WordPress dashboard without setting up FTP, and who are diligent about applying plugin updates promptly, will find this a genuinely useful time-saver.

Not ideal for

Given its extensive vulnerability history—including multiple critical remote code execution flaws—this plugin is not ideal for users who delay updates, manage sensitive or high-traffic sites, or lack the technical oversight to monitor for security patches and unusual file activity.

Pricing & Value

Free version includes

The free version offers full core file management functionality—browsing, editing, uploading, renaming, and deleting files and folders directly from the dashboard—without heavy upsell pressure, according to user feedback.

Pro version (25 - 99 USD / lifetime)

A paid tier exists, though details in user feedback are limited; some reviewers have reported difficulty activating and receiving support for the paid version, suggesting due diligence is warranted before purchasing.

Final Verdict

File Manager remains a hugely popular tool thanks to its convenience and ease of use, and the vast majority of its 1,488 reviews reflect genuine satisfaction. However, its security track record is a serious consideration: twelve documented vulnerabilities, several of them critical, have affected the plugin over the years, and at least one user directly links it to site compromises.

For users who keep plugins rigorously updated and are comfortable monitoring for security advisories, File Manager can still be a practical, no-frills alternative to FTP. Those prioritizing security above convenience, or managing sensitive sites, should weigh the alternatives listed here carefully or apply stricter access controls before installing it.