| CVE-2026-16292 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not perform nonce validation on one of its…
|
5.4
Moyenne
|
2 août 2026 |
| CVE-2026-12277 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input…
|
8.7
Élevée
|
7 juil. 2026 |
| CVE-2026-8380 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post…
|
6.5
Moyenne
|
26 juin 2026 |
| CVE-2026-8378 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not sanitise nor escape a filename submitted to…
|
5.4
Moyenne
|
23 juin 2026 |
| CVE-2026-8379 |
The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly enforce its nonce check on the file…
|
7.5
Élevée
|
23 juin 2026 |
| CVE-2026-5337 |
During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to…
|
6.5
Moyenne
|
3 mai 2026 |
| CVE-2026-0829 |
The Frontend File Manager Plugin WordPress plugin through 23.5 allows unauthenticated users to send emails through the…
|
5.8
Moyenne
|
17 févr. 2026 |
| CVE-2025-14804 |
The Frontend File Manager Plugin WordPress plugin before 23.5 did not validate a path parameter and ownership of the…
|
7.7
Élevée
|
7 janv. 2026 |
| CVE-2023-5105 |
The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to…
|
Non notée
|
4 déc. 2023 |
| CVE-2022-3126 |
The Frontend File Manager Plugin WordPress plugin before 21.4 does not have CSRF check when uploading files, which could…
|
4.3
Moyenne
|
17 oct. 2022 |
| CVE-2022-3125 |
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any authenticated users, such as subscriber, to…
|
Non notée
|
3 oct. 2022 |
| CVE-2022-3124 |
The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files…
|
Non notée
|
3 oct. 2022 |