CVE-2022-3125: fallo en Frontend File Manager Plugin
Frontend File Manager < 21.3 - Subscriber+ Arbitrary File Upload
Publicada el · Actualizada el
25Vexday Risk Score
Prioriza la corrección. Ella explotación observada por VulnCheck.
ssvc Attendepss 1.5%
de la publicación al arma
Publicada en NVD3 oct
VulnCheck7 sept
probabilidad de explotación
1.5%top 27% de las CVE
explotación observada
síVulnCheck
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to rename a file to an arbitrary extension, like PHP, which could allow them to basically be able to upload arbitrary files on the server and achieve RCE
Productos afectados
Unknown · Frontend File Manager PluginCVEs relacionadas — Frontend File Manager Plugin
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-3124—Frontend File Manager < 21.3 - Unauthenticated File RenamingEPSS 8.3%CVE-2023-5105—Frontend File Manager < 22.6 - Editor+ Arbitrary File DownloadEPSS 1.0%CVE-2026-0829MEDIUMFrontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email SendingEPSS 0.7%CVE-2026-8380MEDIUMFrontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post DeletionEPSS 0.5%CVE-2026-8379HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File DownloadEPSS 0.4%CVE-2026-12277HIGHFrontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path TraversalEPSS 0.4%