Re: Don't touch ES File Explorer with a barge pole
v3.2.5.5 was the last non-malware version—but even it suffers from this vulnerability. I am thoroughly spooked, but at least I very rarely connect to public WiFi unless 100% necessary. Constant use of private VPNs also helps :)
https://github.com/fs0c131y/ESFileExplorerOpenPortVuln/issues/10