Not rated
CVE-2023-5105 The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to…
Description
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download files such as `wp-config.php`
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Frontend File Manager Plugin 22.6 | earliest → < 22.6 | 22.6 |
Other CVEs of Frontend File Manager Plugin
The 12 CVEs of Frontend File Manager Plugin →
CVE-2026-16292
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its…
5.4
Medium
CVE-2026-12277
The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input…
8.7
High
CVE-2026-8380
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post…
6.5
Medium
CVE-2026-8378
The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to…
5.4
Medium