Advisories · Technology
Frontend File Manager Plugin.
Every CVE that names Frontend File Manager Plugin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Frontend File Manager Plugin <= 23.6 - File Metadata Update via CSRF
- Frontend File Manager Plugin
- Cross-site request forgery (CSRF)
- CVSS 8.7 High
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal
- Frontend File Manager Plugin
- CVSS 6.5 Medium
Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion
- Frontend File Manager Plugin
- CVSS 7.5 High
Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Download
- Frontend File Manager Plugin
- CVSS 5.4 Medium
Frontend File Manager Plugin <= 23.6 - Subscriber+ Stored Cross-Site Scripting via File Rename
- Frontend File Manager Plugin
- CVSS 6.5 Medium
Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR
- Frontend File Manager Plugin
- Broken access control
- CVSS 5.8 Medium
Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending
- Frontend File Manager Plugin
- Broken access control
- CVSS 7.7 High
Frontend File Manager < 23.5 - Subscriber+ Arbitrary File Deletion
- Frontend File Manager Plugin
-
Frontend File Manager < 22.6 - Editor+ Arbitrary File Download
- Frontend File Manager Plugin
- CVSS 4.3 Medium
Frontend File Manager < 21.4 - File Upload via CSRF
- Frontend File Manager Plugin
- Cross-site request forgery (CSRF)
-
Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
- Frontend File Manager Plugin
- Unrestricted file upload
-
Frontend File Manager < 21.3 - Unauthenticated File Renaming
- Frontend File Manager Plugin
- Broken access control