Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Frontend File Manager Plugin 21.3 Clear all filters
TI-2022-02884 CVE-2022-3125 · GHSA-q6gp-rjmw-h7qw

Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload

Priority MEDIUM 41

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to uploa…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01643 Published 2022-10-03 Fixed in 21.3 CWE-434
TI-2022-02883 CVE-2022-3124 · GHSA-wvhv-jqpm-79vj

Frontend File Manager < 21.3 - Unauthenticated File Renaming

Priority LOW 35

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.08263 Published 2022-10-03 Fixed in 21.3 CWE-862