7.5
Élevée
CVE-2023-7306 The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing…
Description
The Frontend File Manager Plugin plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the wpfm_delete_multiple_files() function in all versions up to, and including, 21.5. This makes it possible for unauthenticated attackers to delete arbitrary posts.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Frontend File Manager Plugin 21.5 | premières → 21.5 | Pas de correctif indiqué |
Autres CVE de Frontend File Manager Plugin
Les 13 CVE de Frontend File Manager Plugin →
CVE-2026-8095
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions…
8.1
Élevée
CVE-2026-1280
The Frontend File Manager Plugin for WordPress is vulnerable to unauthorized file sharing due to a missing capability…
7.5
Élevée
CVE-2025-13382
The Frontend File Manager Plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…
4.3
Moyenne
CVE-2016-15042
The Frontend File Manager (versions < 4.0), N-Media Post Front-end Form (versions < 1.1) plugins for WordPress are…
9.8
Critique