7.5
High
CVE-2023-7306 The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing…
Description
The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfm_delete_multiple_files() function in all versions up to, and including, 21.5. This makes it possible for unauthenticated attackers to delete arbitrary posts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Frontend File Manager Plugin 21.5 | earliest → 21.5 | No fix stated |
Other CVEs of Frontend File Manager Plugin
The 13 CVEs of Frontend File Manager Plugin →
CVE-2026-8095
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions…
8.1
High
CVE-2026-1280
The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability…
7.5
High
CVE-2025-13382
The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…
4.3
Medium
CVE-2016-15042
The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are…
9.8
Critical