Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
25Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck.
ssvc Attendepss 1.2%
from disclosure to weapon
Published on NVDOct 3
VulnCheckSep 7
exploitation probability
1.2%top 35% of all CVEs
observed exploitation
yesVulnCheck
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE
Affected products
Unknown · Frontend File Manager Plugin