Frontend File Manager < 21.3 - Unauthenticated File Renaming
40Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 6.5%
de la publicación al arma
Publicada en NVD3 oct
VulnCheck7 sept
probabilidad de explotación
6.5%top 7% de las CVE
explotación observada
síVulnCheck
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server
Productos afectados
Unknown · Frontend File Manager Plugin