| CVE-2026-16292 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its…
|
5.4
Medium
|
Aug 2, 2026 |
| CVE-2026-12277 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input…
|
8.7
High
|
Jul 7, 2026 |
| CVE-2026-8380 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post…
|
6.5
Medium
|
Jun 26, 2026 |
| CVE-2026-8378 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to…
|
5.4
Medium
|
Jun 23, 2026 |
| CVE-2026-8379 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file…
|
7.5
High
|
Jun 23, 2026 |
| CVE-2026-5337 |
During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to…
|
6.5
Medium
|
May 3, 2026 |
| CVE-2026-0829 |
The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the…
|
5.8
Medium
|
Feb 17, 2026 |
| CVE-2025-14804 |
The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the…
|
7.7
High
|
Jan 7, 2026 |
| CVE-2023-5105 |
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to…
|
Not rated
|
Dec 4, 2023 |
| CVE-2022-3126 |
The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could…
|
4.3
Medium
|
Oct 17, 2022 |
| CVE-2022-3125 |
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to…
|
Not rated
|
Oct 3, 2022 |
| CVE-2022-3124 |
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files…
|
Not rated
|
Oct 3, 2022 |