cleantalk
Vulnerabilities and Security Researches

Frontend File Manager Plugin, 970e473f2a8c8f732eb8a8e61749f39a669cc022

Published on
Sep 26, 2022
Research Description
Frontend File Manager Plugin [nmedia-user-file-uploader] < 21.4 WordPress Frontend File Manager plugin <= 21.3 - Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability Arbitrary Settings Update via Cross-Site Request Forgery (CSRF) vulnerability discovered by WPScan in WordPress Frontend File Manager plugin (versions <= 21.3) Update the WordPress Frontend File Manager plugin to the latest available version (at least 21.4).
Affected versions
max 21.4.
Status
vulnerable