Vulnerabilities

TI-2021-03226 CVE-2021-4369 · GHSA-xcp4-vpmq-w2pr

Frontend File Manager <= 18.2 - Unauthenticated Content Injection

LOW 33

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Content Injection in versions up to, and including, 18.2.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00797 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03225 CVE-2021-4368 · GHSA-254w-gr7h-wvh4

MEDIUM 47

The Frontend File Manager plugin for WordPress is vulnerable to Authenticated Settings Change in versions up to, and including, 18.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01853 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03222 CVE-2021-4365 · GHSA-j7rg-f8wp-8crf

LOW 39

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to, and including, 18.2.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00758 Published 2023-06-07 Fixed in 18.3 CWE-79

TI-2021-03216 CVE-2021-4359 · GHSA-8mxc-2qjp-x88p

LOW 36

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary Post Deletion in versions up to, and including, 18.2.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00877 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03213 CVE-2021-4356 · GHSA-538r-g5r4-2c2w

MEDIUM 46

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Download in versions up to, and including, 18.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03208 CVE-2021-4351 · GHSA-cq9j-298r-ppx5

LOW 33

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated Post Meta Change in versions up to, and including, 18.2.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00678 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03207 CVE-2021-4350 · GHSA-gc42-wwv9-7qjr

LOW 39

The Frontend File Manager plugin for WordPress is vulnerable to Unauthenticated HTML Injection in versions up to, and including, 18.2.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00672 Published 2023-06-07 Fixed in 18.3 CWE-862

TI-2021-03201 CVE-2021-4344 · GHSA-r3qp-rjmv-24xx

LOW 29

The Frontend File Manager plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 18.2.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00467 Published 2023-06-07 Fixed in 18.3 CWE-285