Frontend File Manager Plugin, 783496e57e0855d0a9ecb9031b634c9a6692aa2a

CVE, Research URL: 783496e57e0855d0a9ecb9031b634c9a6692aa2a
Home page URL: Security reports for Frontend File Manager Plugin
Application: Frontend File Manager Plugin
Published on: Jun 10, 2015
Research Description: Frontend File Manager Plugin [nmedia-user-file-uploader] < 3.8 Frontend File Manager <= 3.7 - Arbitrary File Upload The Frontend File Manager plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in versions up to, and including, 3.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
Affected versions: max 3.8.
Status: vulnerable