Update the WordPress Frontend File Manager plugin to the latest available version (at least 21.3).
Raad Haddad (Cloudyrion GmbH) discovered and reported this Arbitrary File Upload vulnerability in WordPress Frontend File Manager Plugin. This could allow a malicious actor to upload any type of file to your website. This can include backdoors which are then executed to gain further access to your website. This vulnerability has been fixed in version 21.3.
File Upload via CrossSite Request Forgery (CSRF) vulnerability
6.5
26.09.2022
Arbitrary Settings Update via CrossSite Request Forgery (CSRF) vulnerability
4.3
26.09.2022
Unauthenticated File Renaming vulnerability
6.5
07.09.2022
Privilege Escalation vulnerability
5.3
12.07.2021
Unauthenticated Content Injection and Stored XSS vulnerabilities
6.1
12.07.2021
Successfully submit vulnerabilities and receive an invite to our Alliance platform.
Learn more
Close
Frontend File Manager
LinkedIn
Facebook
Twitter
Join Discord
