Vulnerability Database

Virtual patches available
See all vulnerabilities

WordPress Frontend File Manager plugin <= 18.2 - Unauthenticated Arbitrary Post Deletion vulnerability

nmedia-user-file-uploader

Software
Frontend File Manager
Vulnerable Versions
<= 18.2
Fixed in version
18.3
CVE
CVE-N/A
References
Vulnerability details
Plugin changelog
Credits
Jerome Bruandet (NinTechNet)
Classification
Other Vulnerability Type
OWASP Top 10
A5: Broken Access Control
Disclosure Date
2021-07-12
CVSS 3.0 score

5.3

Medium

Are your websites subject to this vulnerability?

Patch now
View vulnerabilities for this software
Details

Unauthenticated Arbitrary Post Deletion vulnerability discovered by Jerome Bruandet (NinTechNet) in WordPress Frontend File Manager plugin (versions <= 18.2).

Solution

Update the WordPress Frontend File Manager plugin to the latest available version (at least 18.3).

Found a vulnerability that puts your sites at risk?

Patches available at Patchstack

Found a vulnerability? Help us secure the web and join our community of ethical hackers.

Report a Vulnerability

Are you the developer of this software? Hire our researchers for a thorough security audit.

Learn more
Products
Patchstack Platform
Vulnerability Database
Security Auditing
Patchstack Red Team
Patchstack
Pricing
Features
About Us
Help Center
Articles
Careers
Privacy Policy
Terms & Conditions
Media Kit
© 2021 Patchstack
LinkedIn
Facebook
Twitter
© 2021 Patchstack